MeysamI was testing our sender identification system and checked a mid-size ecommerce domain
47 distinct senders in their DMARC reports, only 12 were authorized
the rest? old trial ESPs, a former agency's Mailchimp account, two Chinese IPs spoofing their domain, and a dozen services they'd forgotten they'd onboarded
most domains have no idea how many systems send as them
