SpoofScore is a passive scanning tool. It reads DNS records and connects to mail servers on port 25 to check STARTTLS support. It does not send emails, modify records, or exploit any vulnerabilities.

If you find a security issue in SpoofScore itself (not in the domains you scan), please report it responsibly:

1. Do not open a public issue
2. Email: aaharrizuan@gmail.com
3. Include steps to reproduce and the potential impact

I'll respond within 48 hours and work on a fix.

This tool is built for security professionals, researchers, and sysadmins to assess their own domains or domains they have authorization to test. Use it responsibly.