pymilter
There are 1 repositories under pymilter topic.
JPT580/pymilter-suspicious-from
A rough pymilter example that can detect suspicious from headers with multiple addresses/domains in emails. It is not perfect, but it certainly is able to help adding a warning flag to emails.