kei-digital.com cannot receive email
kei-digital.com cannot receive email at all.
20 /100
Poor
Email authentication report card
What kei-digital.com publishes in DNS to stop other people sending mail in its name, read record by record.
Can mail be forged as this domain?
Yes, a forgery is delivered
no DMARC record is published, so a receiver that honours what this domain publishes is not told to reject a message with it in the From header, and delivers it.
- Fail
SPF No record
No SPF record is published, so receivers have no list of hosts allowed to send as this domain.
- Fail
DMARC No record
No DMARC record is published, so receivers get no instruction and judge a forged message on SPF and DKIM alone.
- Weak
MTA-STS Not published
No MTA-STS policy, so a sending server has nothing that tells it to insist on verified TLS for this domain.
- Pass
DNSSEC Signed
The zone is signed, so the MX, SPF and DMARC answers above cannot be quietly rewritten in transit.
- Weak
TLS-RPT Not published
No reporting address, so failed TLS deliveries to this domain go unnoticed by its owner.
Why it scores 20?
- This domain cannot receive email.
- No DMARC record, so receiving servers have no policy to apply to forged mail.
- No SPF record, so anyone can send as this domain.
What to publish to close the gaps
The records kei-digital.com is missing, in the order they are worth doing. Owner names are written out in full, so they work whether your DNS panel wants a full name or a relative one.
Publish an SPF record
Namekei-digital.comTypeTXTValuev=spf1 include:<your mail platform> -allList every platform that sends on your behalf, then end the record in -all so everything else fails.
Publish a DMARC record
Start at p=none with a reporting address, read the reports for a few weeks to find the senders you forgot, then move the policy up.
Publish an MTA-STS policy
Name_mta-sts.kei-digital.comTypeTXTValuev=STSv1; id=<a version string you bump on every change>Serve the policy body at https://mta-sts.kei-digital.com/.well-known/mta-sts.txt, start it in testing mode, then switch it to enforce so senders refuse to deliver over an unverified connection.
Publish a TLS reporting address
Without it, a sending server that could not negotiate TLS with your mail hosts has nowhere to tell you.
Questions about kei-digital.com
Every answer below is generated from the stored record for this domain.
Is kei-digital.com a disposable email domain?
Is kei-digital.com spoofable?
Does kei-digital.com publish SPF and DMARC?
Who handles email for kei-digital.com?
How old is the kei-digital.com domain?
How do I block kei-digital.com on my signup form?
Can I trust email from kei-digital.com?
Last verified . We recheck every domain on a schedule, and this report changes only when its records or its verdict do.