domains / families / security / email-security

email-security

combined

Authorized email security review: phishing analysis, SPF/DKIM/DMARC header authentication, BEC pattern investigation, and mailbox token abuse research. DMARC/SPF/DKIM check, email spoofing, SMTP test, and security header analysis

When to use

• Analyzing suspicious messages or domain spoofing exposure.
• Validating a domain's email authentication posture.
• During passive reconnaissance (Phase 1)
• After initial DNS enumeration
• DMARC p=none means the domain can be totally spoofed
• Critical for identifying phishing/business email compromise risks

When not to use

• Live mailbox investigation touches personal data; minimize and anonymize.
• Header analysis cannot detect compromise that leaves no mail trail.

Skill page

Conflict

The two copies overlap on SPF/DKIM/DMARC validation but each contains material steps the other lacks. The uphiago copy provides concrete dig commands, an interpretation table for SPF/DMARC/DKIM results, SMTP relay testing, and an AWS SES spoofing scenario. The sickn33 copy adds a mandatory authorization gate, phishing/BEC analysis workflow, header chain inspection, URL/attachment sandboxing, and tenant policy checks. Crowning one would hide a real alternative: a command-driven recon procedure versus an authorized phishing-investigation workflow.