Launched on Launchit
Free · nothing stored

Can anyone send email as voxaassistant.com?

Read from voxaassistant.com's public DNS records, the same ones anyone can look up. Nothing was sent and nothing was stored.

Wide openF

Yes. Anyone can email as you.

There is nothing telling receiving servers to reject forged mail from voxaassistant.com. A stranger can send an invoice, a payment change or a request to your customers, from your address, and it will arrive looking normal.

What your customer would receive

Mockup, nothing sent

Anyone could put your domain in the From line today. This is roughly how it would look sitting in a client's inbox, next to your real messages.

Accounts <accounts@voxaassistant.com>

to me

09:14

Updated bank details for invoice 2041

Hi,

Our account details have changed since the last invoice. Please use the account below for the outstanding balance, and update your records for future payments.

Sort code 00-00-00
Account 00000000

Apologies for the short notice.

This is the most common invoice fraud there is, and it works because the address is real. A recipient checking the sender carefully still sees your domain.

What your DNS actually says

Mail routingReceiving mail through Google Workspace

This domain accepts email, so it is worth impersonating. Domains that never send are less attractive targets.

aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
SPFNo SPF record

Nothing declares which servers may send email for this domain, so receiving servers have no list to check a sender against.

DKIMNo key at the selectors we tried

DKIM keys live at a name only your provider knows. We tried 15 common ones and found none, which does not prove you have no DKIM. Check with your email provider.

DMARCNo DMARC record

This is the one that matters. Without DMARC, a receiving server that spots a forged sender has no instruction from you about what to do, so it usually delivers it.

The exact records that fix it

Add these in whichever service manages your domain's DNS. Changes take from a few minutes to a few hours to take effect.

Add SPF
Type
TXT
Host
voxaassistant.com
Value
v=spf1 include:_spf.google.com -all

Replace the include with your actual mail provider. This example is Google Workspace.

Add DMARC in monitoring mode first
Type
TXT
Host
_dmarc.voxaassistant.com
Value
v=DMARC1; p=none; rua=mailto:dmarc@voxaassistant.com

Start here to collect reports without affecting delivery. Move to quarantine, then reject, once the reports look clean.

Tell me if this changes

Records get fixed and then quietly broken again. If voxaassistant.com changes, or someone edits a record and flattens it, we will email you once.

One email when something changes, and nothing else. Unsubscribe in one click, no account.

This is what leaves your name. Mailient handles what arrives.

Spoofing is one direction of the problem. The other is the inbox itself: reading what came in, deciding the few things that need you, drafting the replies. That is the part Mailient does, on your existing Gmail.

Start free
Check another domain