Scan result

outlook.com

0Grade BScore

SPF

Which servers can send email as your domain.

Pass

DNS lookups: 1/10

v=spf1 include:spf2.outlook.com -all

DKIM

Cryptographic signature proving message integrity.

Pass

Selector: selector1

v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWyktrIL8DO/+UGvMbv7cPd/Xogpbs7pgVw8y9ldO6AAMmg8+ijENl/c7Fb1MfKM7uG3LMwAr0dVVKyM+mbkoX2k5L7lsROQr0Z9gGSpu7xrnZOa58+/pIhd2Xk/DFPpa5+TKbWodbsSZPRN8z0RY5x59jdzSclXlEyN9mEZdmOiKTsOP6A7vQxfSya9jg5N81dfNNvP7HnWejMMsKyIMrXptxOhIBuEYH67JDe98QgX14oHvGM2Uz53if/SW8MF09rYh9sp4ZsaWLIg6T343JzlbtrsGRGCDJ9JPpxRWZimtz+Up/BlKzT6sCCrBihb/Bi3pZiEBB4Ui/vruL5RCQIDAQAB;n=2048,1452627113,1468351913

DMARC

Policy for handling messages that fail SPF/DKIM.

Warning

Policy: none
Reports: Configured
RUA: reports@rua.getmailposture.com

v=DMARC1; p=none; sp=quarantine; pct=100; rua=mailto:rua@dmarc.microsoft; ruf=mailto:ruf@dmarc.microsoft; fo=1

•Policy is 'p=none' -- monitoring only, no protection. Move to quarantine/reject when ready.

MX Records

Where mail for this domain is delivered.

Pass

5 outlook-com.olc.protection.outlook.com.

Recommended fixes

Ordered by severity. Copy the record, paste it at your DNS registrar, and re-scan.

Tighten your DMARC policy

high

v=DMARC1; p=quarantine; rua=mailto:rua@dmarc.microsoft; pct=100

1Update the TXT record at "_dmarc.outlook.com" with the value shown.
2Monitor aggregate reports for 1-2 weeks before moving p=quarantine -> p=reject.
3Ensure pct=100 once you're confident legitimate mail isn't affected.

DNS -> Records -> Add record -> Type: TXT -> Name: as specified -> Content: paste value -> Save.

Monitor outlook.com 24/7

Get instant email alerts the moment your SPF, DKIM, or DMARC records change or break -- before it costs you deliverability.

Start monitoring

What is SPF?

SPF (Sender Policy Framework) is a DNS TXT record that lists which mail servers are authorized to send email on behalf of outlook.com. Receiving servers check the sending IP against this list; anything not listed can be rejected or marked as spam.

What is DKIM?

DKIM (DomainKeys Identified Mail) cryptographically signs outgoing messages from outlook.com, letting receiving servers verify the message wasn't altered in transit and genuinely came from an authorized sender.

What is DMARC?

DMARC ties SPF and DKIM together for outlook.com, defining what receiving servers should do when a message fails both checks -- and where to send aggregate reports so you can monitor abuse of your domain.