spoofcheck

A Python 3 DNS-only heuristic that reads a target domain's SPF record and its direct or organizational DMARC policy. It reports SPF findings separately, but its binary “spoofing possible” label depends only on whether its DMARC check finds a quarantine or reject policy. It does not send test email or validate DKIM, message alignment, or receiver behavior. The current code maps DNS lookup exceptions to a non-strong result, which can produce a misleading “possible” label; treat output as configuration triage, not proof of real-world spoofability.