asdfasdfasdf-fakedomain-2026.invalid

Subcheck breakdown

Check	Status	Score
DMARC policy	missing	0/25
SPF record	missing	0/10
DKIM selector	missing	0/10
TLS certificate	missing	0/20
WHOIS integrity	whois rate limited	5/10
Subdomain takeover	ct logs busy	10/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

• Publish a DMARC policy: add _dmarc.asdfasdfasdf-fakedomain-2026.invalid TXT «v=DMARC1; p=reject; rua=mailto:dmarc@asdfasdfasdf-fakedomain-2026.invalid»
• Publish an SPF record on asdfasdfasdf-fakedomain-2026.invalid to authorise your sending mail servers
• Publish a DKIM key at default._domainkey.asdfasdfasdf-fakedomain-2026.invalid (v=DKIM1; k=rsa; p=…)
• Publish MTA-STS: add _mta-sts.asdfasdfasdf-fakedomain-2026.invalid TXT and host a policy at https://mta-sts.asdfasdfasdf-fakedomain-2026.invalid/.well-known/mta-sts.txt
• Enable DNSSEC on asdfasdfasdf-fakedomain-2026.invalid — DS records must be published to the invalid zone by your registrar
• No TLS certificate found for asdfasdfasdf-fakedomain-2026.invalid — ensure HTTPS is correctly provisioned

Details

Area	Detail
DMARC	—
SPF	—
DKIM selectors	—
TLS certificate	Missing
WHOIS registrar	—
WHOIS expires	—
Subdomains	CT logs temporarily unavailable — retry shortly
DNSSEC	Unsigned