mail.qenex.ai

Subcheck breakdown

Check	Status	Score
DMARC policy	missing	0/25
SPF record	missing	0/10
DKIM selector	missing	0/10
TLS certificate	ok	20/20
WHOIS integrity	not_found	0/10
Subdomain takeover	clean	15/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

• Publish a DMARC policy: add _dmarc.mail.qenex.ai TXT «v=DMARC1; p=reject; rua=mailto:dmarc@mail.qenex.ai»
• Publish an SPF record on mail.qenex.ai to authorise your sending mail servers
• Publish a DKIM key at default._domainkey.mail.qenex.ai (v=DKIM1; k=rsa; p=…)
• Publish MTA-STS: add _mta-sts.mail.qenex.ai TXT and host a policy at https://mta-sts.mail.qenex.ai/.well-known/mta-sts.txt
• Enable DNSSEC on mail.qenex.ai — DS records must be published to the ai zone by your registrar

Details

Area	Detail
DMARC	—
SPF	—
DKIM selectors	—
TLS certificate	Ok (54 days remaining) — CN=E8,O=Let's Encrypt,C=US
WHOIS registrar	—
WHOIS expires	—
Subdomains (1 subdomains scanned, 0 at risk)	1 found
DNSSEC	Unsigned