microsoft.com

Last scanned 2h ago · Mar 30, 2026, 10:53 PM

Scan AgainExport PDF
A87/100

Your domain is well protected. SPF, DKIM, and DMARC are configured and enforcing. unauthorized emails are rejected.

DMARC Policy: reject1 scan total

Protocol Status

DMARC
32/35
Enforced
SPF
23/25
Hard Fail (-all)
DKIM
17/20
2 keys found
MTA-STS
10/10
Enforced
TLS-RPT
5/5
Configured
BIMI
0/5
Not Found

Score History

A87/100

First scan · Mar 30, 2026, 10:53 PM

Latest Scan Details

DMARCEnforced
32/35RFC RFC 7489

Detected Record

v=DMARC1; p=reject; pct=100; rua=mailto:itex-rua@microsoft.com; ruf=mailto:itex-ruf@microsoft.com; fo=1

Policy

reject

Percentage

100%

Aggregate Reporting

mailto:itex-rua@microsoft.com

Forensic Reporting

mailto:itex-ruf@microsoft.com

DKIM Alignment

relaxed

SPF Alignment

relaxed

SPFHard Fail (-all)
23/25RFC RFC 7208

Detected Record

v=spf1 include:_spf-a.microsoft.com include:_spf-b.microsoft.com include:_spf-c.microsoft.com include:_spf-ssg-a.msft.net include:_spf1-meo.microsoft.com -all

All Mechanism

-all (hard fail)

DNS Lookups

6/10

Record Length

158 bytes

DKIM2 keys found
17/20RFC RFC 6376

Detected Record

selector2._domainkey:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCPkb8bu8RGWeJGk3hJrouZXIdZ+HTp/azRp8IUOHp5wKvPUAi/54PwuLscUjRk4Rh3hjIkMpKRfJJXPxWbrT7eMLric7f/S0h+qF4aqIiQqHFCDAYfMnN6V3Wbke2U5EGm0H/cAUYkaf2Atu...

m1._domainkey:
v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCDlTwvKeX9QjSGmGjOV8K4Gfq7f/1jM36C0DiPUPxvrYFyi3mQ9AWZldW0C4H4c3rE8/Z0epwL91JNGK0OgjH2OI+cHM1nMeKpkbod9glOHLlyphmONQHBPNtR/Cm8t1sSSDbSJoKybjQ1HmGk...

Selectors

selector2, m1

Key Length

~1024 bit

Algorithm

rsa-sha256

Upgrade DKIM key to 2048-bit for stronger cryptographic security.

MTA-STSEnforced
10/10RFC RFC 8461

Detected Record

v=STSv1; id=20190225000000Z;

Policy ID

20190225000000Z

Policy File

accessible

Mode

enforce

Max Age

604800s (7d)

MX Match

policy MX matches actual MX

TLS-RPTConfigured
5/5RFC RFC 8460

Detected Record

v=TLSRPTv1;rua=https://tlsrpt.azurewebsites.net/report

Report URI

https://tlsrpt.azurewebsites.net/report

BIMINot Found
0/5RFC RFC 9495

Publish a BIMI record with your brand SVG logo. Requires DMARC at p=quarantine or p=reject with pct=100.