dmark.is · Icelandic email security

Explore the DNS records attackers use to borrow your brand.

Use an interactive DMARC and SPF demo to see how spoofing risk is assessed, then talk to Kastro about a real DNS review and a safe path to p=reject.

Interactive browser demo

No backend

Illustrative results stay in your browser and do not query live DNS.

Real-world review

By Kastro

Kastro can review actual DNS evidence and scope the right remediation work.

Operator-managed rollout

Kastro

Kastro verifies DNS changes before they go live.

DMARC target

p=reject

Progress through monitor, quarantine, reject without breaking legitimate mail.

02 — The threat

Anyone can send email as your domain. Until you tell receivers not to let them.

Email was built on trust, not identity. Without an enforced DMARC policy, a stranger can put your address in the From field and reach your customers. Flip the switch to see the difference.

Inbox — bjorn@northwind.is2 messages

Northwind Billing ✓ DKIM PASS

billing@northwind.is

Your March statement is ready

Hi Björn — your monthly statement is attached…

Northwind Billing ✕ SPF FAIL · UNALIGNED

billing@northwind.is · sent via 185.220.101.4

URGENT: Update your payment details now

Your account is on hold. Confirm your card to avoid suspension…

p=none — both messages are delivered. The fake one looks identical.

An attacker sends mail “from” your domain

No password needed. SMTP lets anyone write your address in the From field.

Your domain has p=none or none at all

Receivers have no instruction to reject unaligned mail, so it sails through.

It lands in the inbox, looking legitimate

Your logo, your name, your customer — a convincing invoice or password reset.

DMARK closes the gap. We get you to an enforced p=reject safely — without breaking the legitimate mail your business depends on.

03 — The path

From an illustrative result to an enforced policy — without breaking mail.

The demo explains the messy middle: legacy vendors, SPF lookup limits, report XML, and DNS changes that need careful operational review.

Discover

Learn what SPF, DMARC, DKIM, forwarding, and unknown senders mean without connecting an account.

No login

Stabilize

Flatten SPF, remove stale includes, and document every DNS change before it ships.

Reversible

Enforce

Advance DMARC from none to quarantine to reject with report-backed confidence.

p=reject

The enforcement ladder

Most domains never leave the first rung.

p=none — watch only

p=quarantine — suspicious mail diverted

p=reject — spoofed mail blocked

04 — Service capabilities

Move from exposed DNS records to enforced domain trust.

These are capabilities Kastro can scope and deliver for a real domain. They are not activated by the browser demo.

SPF flattening guidance

Plan how Microsoft 365, Google Workspace, marketing tools, and local senders can stay below the 10-lookup limit.

Readable reporting

Turn aggregate-report data into sender inventory, pass/fail trends, and a safer enforcement decision.

Provider-aware rollout

Copy-paste changes tailored for Icelandic DNS providers and reviewed for operational risk.

05 — Operational proof

Every recommendation should explain itself.

This concept view illustrates how DMARC reports, SPF chains, and DNS records can become actions a business can safely approve.

dmark audit console

northwind.is

p=none, 13 SPF lookups, 4 unknown senders

Flatten SPF includes

Remove stale HubSpot include

Ready

Quarantine rollout

Start at pct=25 for seven days

Review

Unknown sender

ASN 1299 fails alignment

Block

06 — Pricing

Learn with the demo. Contact Kastro for real work.

The browser demo is free and illustrative. Real DNS review, remediation, and managed implementation are scoped by Kastro.

Skoðun

Browser-only educational example of DMARC and SPF exposure.

0 ISK

No login or account
Illustrative SPF and DMARC status
No live DNS lookup

Kastro review

A real review of your domain, senders, and enforcement path.

Core

Scoped

Live DNS evidence review
Readable remediation plan
Guided p=reject progression

Kastro Managed

Done-for-you implementation for directors who want DNS changes handled safely.

Quoted

Implementation plan
DNS provider coordination
Post-change verification

Ready when you are