METHODOLOGY

The creation of the spoofability table involved listing every relevant SPF and DMARC configuration, combining them, and then conducting SPF and DMARC information collection using an early version of Spoofy on a large number of US government domains. Testing if an SPF and DMARC combination was spoofable or not was done using the email security using and Gmail, but these services were found to utilize reverse lookup checks that affected the results, particularly for & feature additions:

Logo: cobracode

Tool was inspired by .