Cybersecurity · Email Security
Phishing Detection Platform
An email analyser that flags the phishing signals gateways miss: header anomalies, hidden payloads and spoofed senders.
The challenge.
Email gateways catch the obvious phishing and wave through the rest. Analysts need a second opinion that looks deeper than a reputation score.
The approach.
A Flask web app with multi-format email parsing, header inspection and a threat-pattern rule engine, backed by SQLite and exposed through a REST API.
Engineering decisions.
-
Parses multiple email formats and inspects full headers, not just the visible body.
-
Rule engine targets spoofing, hidden payloads and suspicious URLs.
-
SQLite persistence and a REST API so it slots into an existing workflow.
The outcome.
Catches header anomalies, hidden payloads, suspicious URLs and sender spoofing that slip past gateways, giving a security team a deeper read before they quarantine.