No SPF record found

Description

During the scan, Kayran has detected that no SPF record was found in your site.
We use the SPF record (Sender Policy Framework) to verify the identity of the sender whether it’s email or otherwise, it lists the IP addresses from, and to, which you can send emails on behalf of the domain.
That means that a prompt has indicated that for you.
The prompt simply tells you that your domain is not being configured with a SPF email authentication standard.

An attacker might exploit it in order to perform “spamming” by using your domain for phishing users.
Also, your sent emails will most likely end up in the “Spam” or “junk” folders of the destination since your “reputation” (which is given to you by the Internet Service Providers – ISPs) is poor.

Recommendation

To fix it, all you need to do is configure a SPF for your domain by publishing a DNS .TXT record that will list all the IP addresses that may receive emails on behalf of the domain.
Make sure that the record is written using the correct syntax.

References

https://support.google.com/a/answer/10685031?hl=en

< Return to all Vulnerabilities

The Dark Web

Let’s talk about the darker and more mysterious side of the internet, also known as The Dark Web. You’ve probably heard about it, whether it’s

Read More »

What is a CWE ?

Similar to the article written on CVEs, in this article we will answer the questions :What is CWE ? and, what is the difference between

Read More »

SQLI to RCE

How to preform SQLI TO RCE? One of the most interesting and important things about any site is the database. So, it’s important to protect

Read More »