Anyone can send email that looks like it's from you unless your DNS says otherwise. Check your SPF, DMARC, and DKIM posture in one lookup — nothing touches your systems, we only read what's already public.
Create a free account, verify you control this domain, and run an authorized active scan for exposed ports and services — the deeper check beyond mail posture alone.