Spoofed invoices
Without DMARC enforced, anyone can send mail that says it is from your domain. The fake invoice with new banking details is the usual result, and your customer is the one who pays it.
Email health check
Is your email set up right?
Type your business domain. In about a second you get a grade for the records that decide whether your mail lands in the inbox and whether someone can send invoices that look like they came from you.
Report for
Grade
/ 100
- Mail provider
- Mail servers
- Checked
How this ran Your browser posted the domain to a Lambda function behind CloudFront. It asked the public resolvers for the records, graded them and answered in . Nothing was stored.
Why this matters
Most small businesses have never looked.
Mail landing in spam
Gmail, Yahoo and Outlook now require SPF, DKIM and DMARC from bulk senders, and mail without them is easier to file as junk. A quote that quietly lands there looks like a customer who never answered.
Amazon WorkMail is closing
AWS stopped taking new WorkMail customers on 30 April 2026 and ends the service on 31 March 2027. If your mailboxes are there, the move needs planning now, not in March. I am planning it for the businesses I run mail for.
What I look after, end to end
- Domains and DNS. Registered and hosted in Route 53, so the records that decide where mail goes are in one place.
- Mailboxes. Amazon WorkMail today, and migrations to Google Workspace or Microsoft 365.
- Sending that lands. Amazon SES for the system mail, with SPF, DKIM and DMARC set up and enforced.
- The rest of the plumbing. Certificates that renew themselves, backups, and monitoring that pages my phone.
Want this fixed and looked after?
Send me your domain. I will tell you what I would change and what it would take, and if you want, I will run it from there. I'm in the Lower Mainland, BC, and work with businesses across Canada and the US.