Check SPF, DKIM and DMARC records for any domain. Missing or misconfigured records mean your domain can be spoofed — used to send phishing emails that appear to come from you.
SPF — tells email servers which servers are allowed to send email for your domain. DKIM — digitally signs outgoing email so recipients can verify it is genuine. DMARC — tells recipients what to do with email that fails SPF or DKIM checks. Without it, spoofed emails can reach inboxes.
