Mastertactician23/email-auth-phishing-auditor

Live DNS-based SPF/DKIM/DMARC domain auditor (PCI DSS 10.4.1.1 aligned) paired with a phishing header analyser — tested against real domains and East African fintech phishing patterns # Email Authentication & Phishing Defense Auditor ### A domain email authentication auditor (real live DNS queries against SPF/DKIM/DMARC) paired with a phishing header analyser — scored against PCI DSS 10.4.1.1 and tested against East African fintech-relevant phishing patterns **Author:** Kofi Asibey-Kitiabi **GitHub:** Mastertactician23 **LinkedIn:** asibey-kitiabi **Date:** July 2026 **Status:** Completed **Difficulty:** Advanced --- ## Why This Project > *"90%+ of successful cyberattacks begin with a phishing email."* — CISA > *"41% of banking institutions still lack DMARC protection, despite PCI DSS v4.0 Requirement 10.4.1.1 now mandating anti-phishing mechanisms for any organisation handling card data — enforced starting 2026."* > *"Only 18.4% of domains with DMARC configured actually enforce a policy (p=reject); the vast majority remain stuck in monitoring-only mode indefinitely."* — EasyDMARC, 2026 Phishing is the single most statistically significant attack vector across every threat report referenced throughout this portfolio — the M-Pesa credential theft and BEC scenarios simulated in the File Integrity Monitor project both began with a phishing email in their real-world basis. This project builds the defensive side: a tool that audits whether a domain's email is actually protected, and a tool that analyses a suspicious email to determine whether it's spoofed. **The most important distinction from every other project in this portfolio: the domain auditor's "real-world test" is not simulated.** It performs genuine, live DNS TXT record queries against real domains on the public internet — the exact same read-only, publicly-permitted methodology used by commercial tools like MXToolbox, EasyDMARC, and PowerDMARC. --- ## Table of Contents 1. Project Overview 2. Domain Authentication Auditor 3. Phishing Header Analyzer 4. Tools & Technologies 5. How to Run It 6. Real-World Domain Test Results 7. Phishing Scenario Results 8. PCI DSS & CISA Alignment 9 …