Reading the records…
Reading the records…
Unrecognised domains count as one organisation each, so the true number may be lower.
Asking 2 registries for registration dates.
Registration dates never change the grade; most domains renew automatically.
Named in SPF. These can approve servers to send as googlemail.com.
Run by Google
Falling means someone else controls its DNS, by lapse or hijack.
They can approve any server to send as googlemail.com, and that mail passes SPF and DMARC.
Mail sent to googlemail.com goes to them, including password resets and sign-in links.
Your DMARC reports go to them, listing the servers sending as googlemail.com and how much.
And 1 more name on this domain.
Asking the registry.
Named in MX. Mail sent to googlemail.com goes to these.
Named in DMARC. Your sending reports go to these.
Built from SPF, MX and DMARC report addresses. Your DNS host and DKIM services are not shown, as public DNS does not list them. This shows what is at stake, not current risk.