Forged mail
Does your domain tell the world to reject mail that is pretending to be you, or does it quietly let it through to your customers, your finance team and your suppliers?
Carrier payment fraud check
Can someone email your carriers as you?
Carrier payment diversion usually starts with one email: new bank details, sent from what looks exactly like your address. Not a lookalike domain. Yours. Your carriers and customers have no reason to doubt it, and the next payment goes to the wrong account. Whether that email can be sent from your domain today is written in public records, and this check reads them.
Enter your domain. The result is on screen in seconds.
SampleWhat you get back
Missing
No sender authorization record. Any server on the internet can claim to be you.
Not seen
No signing keys found at the common locations. Forgeries and real mail look identical to receivers.
Missing
No policy record. Receivers have no instructions, so forged mail is delivered normally.
Spoofable
example.com can be spoofed today. The fix is 30 to 45 minutes of DNS work.
By email
Your written report adds the wider domain records and checks whether your people's work credentials are already in a public breach dump.
FlyoverRunning
What we look at
Four questions, answered from outside your fence.
Everything below is readable by anyone on the internet, which is the point. We are not finding secrets. We are telling you what is already public, and what an attacker sees before they pick a target.
Outbound signing
Is the mail you actually send signed, so a recipient can prove it came from you? Unsigned means anyone can imitate it and nobody downstream can tell the difference.
Domain records
Can the records that route your mail and your website be tampered with without anyone noticing? This is the plumbing under everything else, and it is usually the least watched.
Exposed credentials
Are your people's work credentials already sitting in a public breach dump? If a password is out there and still in use, none of the rest matters much.
No catch
The report is yours either way.
No sales call is required to get it. It is yours to keep, forward, and act on with whoever you like, including your current IT provider. If something is open and you would rather we fixed it, that is usually 30 to 45 minutes and we do not bill for it. That conversation is a separate one, and it is one email or one call away: [email protected] or 312-255-3066.