Regional domain · mail authentication
khec.krd
khec.krd has SPF but no DMARC policy
khec.krdSPFNo DMARC2 names in the log
What is published
- SPF
- published
- SPF default
- ~all
- DMARC
- none found
- DMARC policy
- none published
khec.krd has SPF but no DMARC policySPF alone does not tell a receiver what to do with a message that fails, and it does not cover the address the reader actually sees. Without DMARC the check is advisory.
What it means
This domain publishes no policy telling receivers what to do with mail that fails authentication. Mail that claims to come from khec.krd therefore has little or nothing it can fail.
How it is fixed
Publish a DMARC record at _dmarc.khec.krd. Start at p=none with a reporting address, read the reports, then move to p=quarantine and p=reject once legitimate senders are accounted for. A domain that sends no mail at all can publish a rejecting policy immediately.
This reads only what khec.krd has chosen to publish in DNS.
No mail was sent, no mail server was contacted, and this does not test whether
spoofing would in fact succeed — only what the domain has asked receivers to do.
Anyone can verify it with a DNS query.