Assalamu alaikum wa rahmatullahi wa barakatuh,

I received a QuranFoundation account verification email from:

My email client displayed a warning saying:

“This email has failed its domain’s authentication requirements. It may be spoofed or improperly forwarded.”

I have attached a screenshot with my email address redacted.

This may be a SPF, DKIM, or DMARC alignment issue with the sending domain. I wanted to report it so the team can investigate and ensure new users do not receive security warnings when signing up or verifying their accounts.

Expected result:

The verification email should pass domain authentication checks and not show a spoofing/security warning.

Actual result:

The verification email was flagged as failing domain authentication.

Jazakum Allahu khairan for all your work on Quran.com. May Allah bless your efforts and make them a sadaqah jariyah.

Wassalamu alaikum wa rahmatullahi wa barakatuh.