Found your company's domain here?

What to do depends on how the message was sent. Check the label on your record, then follow the matching steps. Everything here is free to do yourself.

Likely compromised mailbox

Someone signed in to a real mailbox at your domain and sent from it. Your mail provider, DNS, and website are probably fine. The mailbox is not.

Reset the mailbox password.
Turn on multi-factor authentication.
Sign out all active sessions.
Check for forwarding rules and inbox rules you didn’t create.
Warn your contacts that messages may have come from you.

Not sure how to lock down a mailbox? That's normal.

Most business owners never touch their registrar, DNS, or mail settings. Send the note below to whoever set up your website or email, or have one of our companies handle it.

Copy this to send to your IT person

Hi,

One of the mailboxes at our domain was used to send mail we didn't write. Could you:

1. Reset the password on that mailbox and any admin accounts.
2. Require multi-factor authentication for every account on the domain.
3. Sign out all active sessions and revoke app passwords / OAuth grants.
4. Check the mailbox for forwarding rules, inbox rules, and delegates we didn't create, and remove them.
5. Review the sign-in log for the past 30 days for unfamiliar locations.

Background: https://www.unsolicitedoutreach.com/found-your-domain

Thanks.

Email it

Or let us do it

37SOLUTIONS(opens in a new tab)DNS, SPF, DKIM, and DMARC set up correctly, and mailbox cleanup after a compromise.

These are our companies. Removal from this site is free and never depends on hiring us.

Want a record annotated or removed?

Once the problem is fixed, prove you control the domain with a DNS record and we will annotate or remove it. Removal is free.

Start a removal request

Prefer someone handle the fixes? 37SOLUTIONS does this work(opens in a new tab).