kt-family.my.id is a disposable email domain
kt-family.my.id hands out throwaway mailboxes, so an address there identifies nobody.
0 /100
Poor
Email authentication report card
What kt-family.my.id publishes in DNS to stop other people sending mail in its name, read record by record.
Can mail be forged as this domain?
Yes, a forgery is delivered
no DMARC record is published, so a receiver that honours what this domain publishes is not told to reject a message with it in the From header, and delivers it.
- Fail
SPF No record
No SPF record is published, so receivers have no list of hosts allowed to send as this domain.
- Fail
DMARC No record
No DMARC record is published, so receivers get no instruction and judge a forged message on SPF and DKIM alone.
- Weak
MTA-STS Not published
No MTA-STS policy, so a sending server has nothing that tells it to insist on verified TLS for this domain.
- Pass
DNSSEC Signed
The zone is signed, so the MX, SPF and DMARC answers above cannot be quietly rewritten in transit.
- Weak
TLS-RPT Not published
No reporting address, so failed TLS deliveries to this domain go unnoticed by its owner.
Why it scores 0?
- Mailboxes on this domain are throwaway, so no identity stands behind them.
- No DMARC record, so receiving servers have no policy to apply to forged mail.
- No SPF record, so anyone can send as this domain.
What to publish to close the gaps
The records kt-family.my.id is missing, in the order they are worth doing. Owner names are written out in full, so they work whether your DNS panel wants a full name or a relative one.
Publish an SPF record
Namekt-family.my.idTypeTXTValuev=spf1 include:<your mail platform> -allList every platform that sends on your behalf, then end the record in -all so everything else fails.
Publish a DMARC record
Start at p=none with a reporting address, read the reports for a few weeks to find the senders you forgot, then move the policy up.
Publish an MTA-STS policy
Name_mta-sts.kt-family.my.idTypeTXTValuev=STSv1; id=<a version string you bump on every change>Serve the policy body at https://mta-sts.kt-family.my.id/.well-known/mta-sts.txt, start it in testing mode, then switch it to enforce so senders refuse to deliver over an unverified connection.
Publish a TLS reporting address
Without it, a sending server that could not negotiate TLS with your mail hosts has nowhere to tell you.
Questions about kt-family.my.id
Every answer below is generated from the stored record for this domain.
Is kt-family.my.id a disposable email domain?
Is kt-family.my.id spoofable?
Does kt-family.my.id publish SPF and DMARC?
Who handles email for kt-family.my.id?
How old is the kt-family.my.id domain?
How do I block kt-family.my.id on my signup form?
Can I trust email from kt-family.my.id?
Last verified . We recheck every domain on a schedule, and this report changes only when its records or its verdict do.