endpoints.news
Number 63 of the Top 100 · Tranco rank 70
Can endpoints.news be forged?
Can endpoints.news be forged?
Yes. The policy asks only for reports, so forged mail is delivered.
- The exact name
- none · subdomains none · reports to Your own mailbox
- Names that copy
- 13 registered lookalikes can send mail. DMARC never sees them. See them →
What we noticed
- exists:%{i}._spf.mta.salesforce.com resolves for each message, so the senders it allows cannot be listed from outside.
- The DMARC policy only reports. It does not stop mail that fails.
- The SPF record marks an unlisted sender as a soft failure. A hard failure is stronger.
Senders it names Google Workspace, Salesforce
- Google Workspace include:_spf.google.com· DKIM key found
- Salesforce include:_spf.salesforce.com
- Google Workspace runs its mail hosts
These are the services the records name. A record can name a service no longer used, and a sender can sign without being named.
SPF~all · 4 of 10 lookups · at least 101 thousand addresses
Flags others · 4 of 10 lookups · 0 of 2 void lookups · 100,608 IPv4 addresses · 6 IPv6 blocks · Kept by a sender-policy service
The full list cannot be known from outside: it uses macros.
Every term and include
DKIM1 key found
- google._domainkey · rsa 2048· Google Workspace
We look under the selectors of the services the records name. A domain can have keys we do not find.
Sending names none found
No subdomain of endpoints.news that we found publishes mail records.
ReportsYour own mailbox
Aggregate reports (rua) go to mailto:dmarc@endpoints.news. No failure reports are asked for.
Transport MTA-STS none · TLS-RPT none · BIMI none
MTA-STS asks senders to deliver to endpoints.news over encrypted connections only. TLS-RPT asks for reports when they cannot. BIMI shows a logo beside mail that passes DMARC at quarantine or reject.
Read on Oct 28, 2026. Check it again yourself →
Watch your own domain's mail this way: Sender Security · the DMARC Report