kayak.com email security: SPF, DKIM & DMARC

Is kayak.com spoofable? See kayak.com's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.

Last updated: June 3, 2026

90A
This domain is protected against spoofing

SPF

OK
v=spf1 include:_spf.psm.knowbe4.com include:mail.zendesk.com include:_spf.presscloud.com include:helpscoutemail.com include:kayak.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all

DKIM

OK
Selectors: google, k1, mandrill, s1, s2, zendesk1, zendesk2

DMARC

OK
v=DMARC1; p=reject; pct=100; adkim=r; aspf=r; rua=mailto:dmarc_agg@vali.email

MX

OK
mxb-009e5101.gslb.pphosted.com, mxa-009e5101.gslb.pphosted.com

MTA-STS

Missing

No record found

Read the guide

Recommendations

  1. 1Add MTA-STS to enforce TLS encryption for incoming emails

    Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.

Run a live analysis

The results above are updated daily. For an instant check of kayak.com, run a live analysis.

Analyze kayak.com live

Frequently asked questions about kayak.com

Is kayak.com spoofable?

No. kayak.com is protected against email spoofing with a robust configuration. Email security score: 90/100 (grade A).

Does kayak.com have an SPF record?

Yes, kayak.com publishes an SPF record (~all qualifier).

What is kayak.com's DMARC record?

kayak.com publishes a DMARC record (_dmarc.kayak.com) with a p=reject policy.

Does kayak.com use DKIM?

Yes, DKIM signatures were detected for kayak.com.

Want to test another domain? Run a free email spoofing test.

Guides to understand these results

Check other domains