Resources / Research
Email security in Greek shipping 2026
Method published 24 October 2026, results pending
A changed bank account in an email that looks like an agent's or a bunker supplier's is how a shipping company loses money. Three public DNS records decide how easily someone can send mail that passes as yours. This study reads them for the ship-management companies of Piraeus and Athens.
Which companies we checked
The 572 ship-management companies of Piraeus and Athens that manage ocean-going ships of over 1,000 gt, as counted in Naftika Chronika's annual research[1], each by the domain on its own website.
What we checked
- The SPF record: whether one is published and whether it ends in a hard fail.
- The DMARC record: whether one is published and whether its policy is none, quarantine or reject.
- DKIM keys at the selectors the large mail providers use by default, and the length of each key.
- Whether the domain receives mail at all (MX records).
- Typo variants of the domain that resolve in DNS, the names a fraudster would register.
How we checked
Every record comes from public DNS, as in the free domain check, which reads all of these except DKIM. Nothing is sent to any company's servers and no account is signed in to. A lookup that does not answer is counted as not read, never as a missing record.
How we report results
As shares across all the companies and by fleet size band. No company is named. A company can ask for its own result, and can check its domain itself at any time.
Results
Pending. The figures will be published on this page.
Sources
Check your own domain now
SPF, DMARC, MX and the lookalikes of your domain, from public records, in under a minute.