I forgot to add that if one is to set SPF/DMARC records to show the domain is not used for email then there should be the same TXT records set on a wildcard DNS

I forgot to add that if one is to set SPF/DMARC records to show the domain is not used for email then there should be the same TXT records set on a wildcard DNS entry to match spoofed non-apex records. * 4h in txt "v=spf1 -all" * 4h in mx 0 . *._domainkey 4h in txt "v=DKIM1; p="