Most web domains are not protected against email spoofing, an antiquated attack that is actually an easy problem to solve. If you’re concerned that your domain may be vulnerable to spoofing, check out SpoofCheck, our tool that diagnoses web and email domains.
SpoofCheck diagnoses if a domain is vulnerable to email spoofing with a simple YES or NO result. From there, the tool provides you with actionable recommendations for remediation.
Read Alex DeFreese’s write-up showcasing his extensive research into the subject as well as how you can protect your domain.
And for a visual demonstration of how spoofing works: