AI Based e-Mail and Domain Spoofing Detection

In digital day to day life email is one of the most used communication system, but it is also a common entry point for cyberattacks. Email spoofing is one of the most threats to an indivisual or a group, where attackers pretend their emails to make them look like they’re coming from some trusted resources. To overcome this issue, we built an email spoofing detection system that combine machine learning with authentication on mails. TF-IDF is used to show meaningful patterns from the email content and a Random Forest algorithm to classify whether an email is spoofed or not. On top of that, it checks if the sender’s domain is verified using SPF and DMARC records. Emails are accessed securely using the Gmail API and OAuth 2.0, and the results are shown to the user through a simple web interface built with Flask. This analyses both content and origin of mails, thus helps users avoid spoofed messages more accurately and also in real time.

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2025-06-02
DOI
https://doi.org/10.5281/zenodo.15573564
Primary Topic
Spam and Phishing Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

AI Based e-Mail and Domain Spoofing Detection

Zenodo (CERN European Organization for Nuclear Research)
Spam and Phishing Detection
article

AI Based e-Mail and Domain Spoofing Detection

article en

Abstract

In digital day to day life email is one of the most used communication system, but it is also a common entry point for cyberattacks. Email spoofing is one of the most threats to an indivisual or a group, where attackers pretend their emails to make them look like they’re coming from some trusted resources. To overcome this issue, we built an email spoofing detection system that combine machine learning with authentication on mails. TF-IDF is used to show meaningful patterns from the email content and a Random Forest algorithm to classify whether an email is spoofed or not. On top of that, it checks if the sender’s domain is verified using SPF and DMARC records. Emails are accessed securely using the Gmail API and OAuth 2.0, and the results are shown to the user through a simple web interface built with Flask. This analyses both content and origin of mails, thus helps users avoid spoofed messages more accurately and also in real time.

Zenodo (CERN European Organization for Nuclear Research)
Openalex Percentile: Top 38%
Spam and Phishing Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.