Skip to content
whois.me.uk
Menu
Sign in

SPOOF-EXPOSED

The domain can be spoofed

What it means

With no enforced DMARC and weak or missing SPF, anyone can send mail that appears to come from your domain and most receivers will accept it. This is how invoice fraud and phishing against your customers start.

How to fix it

  1. 1Publish SPF ending in -all that lists every legitimate sender.
  2. 2Enable DKIM signing at every sending service.
  3. 3Publish DMARC with p=none and reports, then move to p=reject.

Re-check after the change

DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.