All data displayed is public and provided by the DNS system. Use of this website is subject to our Terms of Service.
Last checked about 9 hours ago
Your domain has strong email authentication. A few improvements can get you to a perfect score.
50 / 50 points
DMARC record is valid and configured correctly.
v=DMARC1; p=reject; pct=100; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1
Policy (p)
reject
DKIM Alignment (adkim)
Relaxed (default)
SPF Alignment (aspf)
Relaxed (default)
Verification successful
Verification successful
You can add our monitoring system alongside your existing setup. DMARC supports multiple mailto: addresses, giving you additional visibility and backup reporting.
0 / 20 points
No BIMI Record Found
Publish a TXT record at default._bimi.sharepoint.com with v=BIMI1, logo URL (l=) and optional verified mark certificate (a=).
30 / 30 points
SPF record is valid.
v=spf1 include:_spf-a.sharepoint.com -all
Syntax Check
OK
DNS Lookup Count
5 / 10 max
Root-level mechanisms requiring DNS queries: 1.
Void Lookups
0 / 2 max
Fail: Reject emails from unauthorized servers (recommended for production)
Grouped by DNS record source (includes and sub-includes)
This record also contains:
This record also contains:
This record also contains:
This record also contains:
SPF record found
sharepoint.com
TXT Record
v=spf1 ip4:13.72.14.112 ip4:23.97.0.167 ip4:51.107.181.126 ip4:51.107.181.69 ip4:51.12.5.148 ip4:51.12.5.88 ip4:52.238.73.234 ip4:104.210.72.65 ip4:104.210.76.66 ip4:40.127.84.30 ip4:40.127.87.233 ip4:191.232.39.149 ip4:104.41.45.30 ip4:52.233.26.202 ip4:52.233.28.167 ip4:52.232.131.201 ip4:52.242.35.18 ip4:104.211.76.245 ip4:104.211.73.29 ip4:40.69.136.121 ip4:52.176.53.79 ip4:40.121.150.95 ip4:40.71.37.33 include:_spf-b.sharepoint.com -all
Processed recursively per RFC 7208
SPF record found
_spf-a.sharepoint.com
TXT Record
v=spf1 ip4:40.70.65.224 ip4:40.70.217.223 ip4:52.143.139.64 ip4:52.143.137.234 ip4:52.136.153.118 ip4:52.136.153.156 ip4:52.185.154.48 ip4:13.78.93.31 ip4:52.175.157.246 ip4:52.175.158.143 ip4:52.231.38.7 ip4:52.231.39.244 ip4:52.238.74.183 ip4:52.231.206.229 ip4:52.231.202.124 ip4:157.55.210.193 ip4:65.52.235.159 ip4:157.55.141.197 ip4:65.52.234.215 ip4:52.240.144.116 ip4:52.178.166.22 ip4:52.169.67.105 include:_spf-c.sharepoint.com -all
Processed recursively per RFC 7208
SPF record found
_spf-b.sharepoint.com
TXT Record
v=spf1 ip4:102.133.161.59 ip4:102.133.163.113 ip4:102.133.75.216 ip4:102.133.75.177 ip4:13.65.210.221 ip4:13.84.40.64 ip4:104.210.145.26 ip4:13.84.45.239 ip4:13.84.168.104 ip4:13.76.139.48 ip4:52.163.61.106 ip4:13.71.120.233 ip4:13.71.123.17 ip4:20.45.67.210 ip4:20.45.71.220 ip4:40.123.212.44 ip4:40.123.204.47 ip4:51.140.117.180 ip4:51.140.126.121 ip4:51.141.38.99 ip4:51.141.28.200 ip4:52.232.126.143 ip4:52.232.123.80 include:_spf-d.sharepoint.com -all
Processed recursively per RFC 7208
SPF record found
_spf-c.sharepoint.com
TXT Record
v=spf1 ip4:104.211.186.227 ip4:104.211.186.224 ip4:23.97.120.184 ip4:23.97.120.217 ip4:51.116.216.41 ip4:51.116.219.197 ip4:51.116.235.158 ip4:51.116.235.177 ip4:51.120.76.171 ip4:51.120.79.45 ip4:51.120.164.34 ip4:51.120.164.65 ip4:51.107.79.214 ip4:51.107.79.228 ip4:51.107.224.82 ip4:51.107.231.204 include:spf.protection.outlook.com -all
Processed recursively per RFC 7208
SPF record found
_spf-d.sharepoint.com
TXT Record
v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all
Processed recursively per RFC 7208
How sharepoint.com configures email authentication
v=DMARC1; p=reject; pct=100; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1
v=spf1 include:_spf-a.sharepoint.com -all
Configuration changes will appear here when detected
Run a free email authentication check (DMARC, SPF, BIMI).
We will generate a shareable URL for your domain.
Try popular examples: google.com, amazon.com, booking.com
Discover how other organizations configure their email authentication
Frequently checked
Reject policy + valid SPF
Also using reject
Showing domains checked by our users. All data is from public DNS records.
We analyze your domain's email authentication: DMARC policy and alignment, SPF record and includes, and BIMI logo/CV when present.
Healthy authentication improves delivery and blocks spoofing. Major inbox providers increasingly require DMARC and robust SPF/DKIM practices for senders.
Don't rely on snapshots. Get the most accurate, real-time insights into your email delivery and reputation with DMARCTrust.