alesian.security
← Top 100 Domains

qq.com

Number 65 of the Top 100 · Tranco rank 73

qq.com is Tencent's portal and the home of QQ, one of China's largest messaging services and free email providers.

Can qq.com be forged?

Can qq.com be forged?

Partly. Forged mail goes to the spam folder, where people still find it.

The exact name
quarantine · subdomains quarantine · reports to Your own mailbox
Names that copy
108 registered lookalikes can send mail. DMARC never sees them. See them →

What we noticed

  • The DMARC policy sends failing mail to the spam folder. A policy of reject stops it.
  • The SPF record marks an unlisted sender as a soft failure. A hard failure is stronger.
  • No DKIM selector answered, so the mail of the domain carries no signature.
Senders it names none named

These are the services the records name. A record can name a service no longer used, and a sender can sign without being named.

SPF~all · 8 of 10 lookups · 3,093 addresses

Flags others · 8 of 10 lookups · 0 of 2 void lookups · 3,093 IPv4 addresses · 0 IPv6 blocks · Includes of its senders

Every term and include
  • 3,093 — 8
  • ~all — — —
    • DKIM0 keys found

    We look under the selectors of the services the records name. A domain can have keys we do not find.

    Sending names 1 name, 0 at reject
    NamePolicySPF lookupsReports to
    docs.qq.comnone4nowhere

    The first 50 names are checked.

    ReportsYour own mailbox, and elsewhere on 1 names

    Aggregate reports (rua) go to mailto:mailauth-reports@qq.com. No failure reports are asked for.

    Transport MTA-STS none · TLS-RPT none · BIMI none

    MTA-STS asks senders to deliver to qq.com over encrypted connections only. TLS-RPT asks for reports when they cannot. BIMI shows a logo beside mail that passes DMARC at quarantine or reject.

    Read on Oct 28, 2026. Check it again yourself →

    Watch your own domain's mail this way: Sender Security · the DMARC Report