Email spoofing protection weak (SPF/DMARC)

Why it matters

Anyone can send email that looks like it came from your domain, which powers phishing of your users.

How to fix it

Publish an SPF record and a DMARC record with p=quarantine or p=reject.

How we test it

Passive — runs in the free check, looks only at what a browser can see.