spfz - MailSpoof Checker

---

A lightweight Python utility designed to audit domain security records (SPF and DMARC). This tool helps identify if a domain is vulnerable to email spoofing by analyzing its DNS configuration.

---

Features

• SPF Verification: Checks for the presence of the Sender Policy Framework (SPF) record.
• DMARC Analysis: Detects DMARC records and categorizes policy strength:
  • Strong: p=reject or p=quarantine.
  • Weak: p=none.
  • Not Found: No valid record detected.
• Security Verdict: Provides a clear summary of the domain's spoofing protection status.
• Colorized Output: Clean, terminal-friendly UI using Colorama.

Dependencies

Ensure you have the required Python libraries installed:

pip install -r requirements.txt

Installation

curl -sSL https://raw.githubusercontent.com/wreakdev/spfz/main/spfz_setup.sh | bash

The script copies the tool to $HOME/.local/bin/ as spfz *Note: Ensure that $HOME/.local/bin/ is in your system's PATH

Usage

Once installed, you can audit any domain by simply typing:

spfz <url>

Disclaimer: Educational Purposes Only

This tool is designed for educational, research, and security auditing purposes only.

• Authorized Use Only: You may only use this tool to analyze domains that you own or have explicit, written permission to test.
• Liability: The author assumes no liability and is not responsible for any misuse, damage, or illegal activity caused by this program.
• Compliance: Users are entirely responsible for complying with all applicable local and international laws regarding cybersecurity and privacy.

By downloading or using this software, you agree to these terms.