Skill UI

A comprehensive guide and toolkit for digital forensics experts to parse and analyze raw email headers (Received, Message-ID, etc.). This method traces the true origin of suspicious emails, validates sender authenticity by analyzing SPF, DKIM, and DMARC records, and confirms or rules out email spoofing attempts. Essential for incident response and phishing investigation.

A comprehensive guide for integrating transactional email sending into applications using Mailtrap's Email API. It covers critical best practices, including separating development (Sandbox) and production environments, implementing secure Bearer token authentication, and performing essential domain verification (SPF, DKIM, DMARC). Use this when building features like password resets or debugging email delivery pipelines.

This guide provides a systematic framework for authorized email security reviews. It covers advanced phishing analysis, including deep dives into email headers, assessing SPF/DKIM/DMARC compliance, identifying Business Email Compromise (BEC) patterns, and researching mailbox token abuse. It is essential for incident response, threat intelligence, and security architecture review.

Analyzes published DNS TXT records (SPF, DMARC, DKIM, BIMI) to produce a priority-ordered spoofability verdict for a domain. Distinguishes envelope MAIL FROM from header From, handles SPF PermError and include-chain takeover risks, and explains why SPF -all alone is insufficient without DMARC enforcement. Use for security audits and phishing feasibility assessments.

A comprehensive guide for authorized red team engagements, covering the end-to-end lifecycle of advanced phishing campaigns. Learn techniques for infrastructure setup (domain aging, SPF/DKIM/DMARC), payload delivery (macro weapons, HTML smuggling), and bypassing email security gateways (MFA bypass, domain spoofing). Essential knowledge for penetration testers and security professionals.

Perform authorized email security reviews including phishing analysis, SPF/DKIM/DMARC authentication checks, BEC pattern investigation, and mailbox token abuse research. Provides workflows for header analysis, IOC extraction, and security awareness design.

Add and verify a Mailtrap sending domain: publish SPF, DKIM and DMARC records, troubleshoot DNS propagation, automate setup via API and DNS provider APIs, and complete compliance for live email sending.