From Dev.to
Can these domains be spoofed? We checked SPF and DMARC of 102 well-known domains, and only half of the banks reject forged mail
Most phishing mail does not need a hacked server. It only needs a sender address that looks right. Whether a forged mail with @yourbank.com in the From line gets delivered depends largely on one DNS r...