MailDrop v1.0.0
Upload an .eml or .msg file and get a clear, explained verdict without ever opening the email in a mail client.
What MailDrop analyzes
Authentication and origin
- SPF, DKIM and DMARC checks with the raw observed values and plain-language explanations of what a failure actually means
- Detection of email security gateways (Check Point, Proofpoint, Mimecast, Microsoft Safe Links, Barracuda) so that authentication failures caused by your own infrastructure are not mistaken for phishing, including original ARC results from before the gateway touched the message
- Full delivery route: every hop with timing and delays, raw Received headers in a readable table, and the geographic route plotted on a map
Attachments
- Checked against VirusTotal by hash - the file itself is never uploaded anywhere
- Clear verdicts with engine counts ("flagged by 5 of 73 engines"), malware signature names and first-seen dates
Links
- Extracted from both text and HTML bodies, with security-gateway rewrites unwrapped so you see the real destination
- Checked against VirusTotal, with lookalike-domain detection (paypa1 vs paypal), punycode warnings, and flags when a link's visible text does not match where it actually goes
Content
- Hidden tracking pixel detection, with a warning explaining exactly what the sender would learn if you opened the email
- A list of every remote resource the email would load and which hosts would be contacted
- A safe text-only preview of the message body - scripts, formatting, images and clickable links removed
Privacy by design
- Uploaded emails are processed entirely in memory and never stored
- IP geolocation runs against a local MaxMind GeoLite2 database no IP addresses from analyzed emails ever leave your server
- Attachments never leave your server either; only their hashes are looked up
Full Changelog: https://github.com/bjornhels/MailDrop/commits/v1.0.0