Domain spoofing — Domain spoofing is sending email or creating content that falsely appears to come from a business’s domain. It is a common method in phishing and fraud. Email authentication records such as SPF, DKIM, and DMARC let receiving servers reject spoofed messages. The Email Security DNS Toolkit helps set these records up.

Added October 21, 2026