Detectify team has put together an extensive guide to help you check if your domain is at risk of forced spoofed emails. Spoofing is when someone sends an email with a forged sender address. Email does not have authentication built in, attackers use spoofing to take advantage of the trust that the spoofed domain carries, and to get users to give up sensitive information. To prevent spoofing, all systems must be manually configured correctly to the highest standard of authentication. To effectively stop forged email being delivered, the sending domains, their mail servers, and the receiving system all need to be configured correctly.”]