A mail header has a lot of information and we only extract a few. To improve phishing detection we might need more information. Extract more information from the header and store them. We might not store them in core data (data base). This is a good start for working on phishing detection.