<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Detecting Email Spoofing

## Header Analysis
```bash
grep -E "^Authentication-Results:" headers.txt
grep -E "^(From|Return-Path|Reply-To):" headers.txt
grep "^Received:" headers.txt | tac
```

## swaks — Spoofing Tests
```bash
swaks --to target@example.com --from ceo@evil.com --server mx.example.com
swaks --to target@example.com --from '"CEO Name" <ceo@evil.com>' --server mx.example.com
```

## dig — Domain Verification
```bash
dig A examp1e.com +short
dig -x 203.0.113.50 +short
```
