Free · no account · public DNS only

Can anyone send email as getvoxa.co?

Read from getvoxa.co's public DNS records, the same ones anyone can look up. No email was sent.

Monitoring onlyD

Yes. You are watching it happen.

getvoxa.co publishes a DMARC record set to monitor only. Receiving servers detect the impersonation and deliver it anyway, because that is what you have asked them to do.

What your customer would receive

Mockup, nothing sent

Anyone could put your domain in the From line today. This is roughly how it would look sitting in a client's inbox, next to your real messages.

Accounts <accounts@getvoxa.co>

to me

09:14

Updated bank details for invoice 2041

Hi,

Our account details have changed since the last invoice. Please use the account below for the outstanding balance, and update your records for future payments.

Sort code 00-00-00
Account 00000000

Apologies for the short notice.

This is the most common invoice fraud there is, and it works because the address is real. A recipient checking the sender carefully still sees your domain.

What your DNS actually says

Mail routingReceiving mail through Google Workspace

This domain accepts email, so it is worth impersonating. Domains that never send are less attractive targets.

smtp.google.com

SPFNo SPF record

Nothing declares which servers may send email for this domain, so receiving servers have no list to check a sender against.

DKIMSigning key found (google)

Your outgoing mail is cryptographically signed, so a receiving server can verify it genuinely came from you.

DMARCDMARC set to monitor only

Your policy is p=none, which means: notice the impersonation, then deliver it anyway. Most domains are left here after setup and never moved on.

v=DMARC1; p=none;

The exact records that fix it

Add these in whichever service manages your domain's DNS. Changes take from a few minutes to a few hours to take effect.

Add SPF

Type: TXT
Host: getvoxa.co
Value: v=spf1 include:_spf.google.com -all

Replace the include with your actual mail provider. This example is Google Workspace.

Move DMARC off monitoring

Type: TXT
Host: _dmarc.getvoxa.co
Value: v=DMARC1; p=quarantine;

Quarantine first, then reject. Going straight to reject can bounce your own newsletters and invoicing tools.

Tell me if this changes

Records get fixed and then quietly broken again. If getvoxa.co changes, or someone edits a record and flattens it, we will email you once.

One email when something changes, and nothing else. Unsubscribe in one click, no account.

This is what leaves your name. Mailient handles what arrives.

Spoofing is one direction of the problem. The other is the inbox itself: reading what came in, deciding the few things that need you, drafting the replies. That is the part Mailient does, on your existing Gmail.

Start free

Check another domain

More free tools