microsoft.com
Excellent, with 4 things to fix
microsoft.com scored 92/100 (grade A). The main issues are DKIM key shorter than 2048 bits and could not look up the BIMI record, plus 3 more. Detected senders: Microsoft 365.
Checked 2026-10-02 12:29 UTC · fresh check
Diagnosis notes
- Warning: DNS lookup budget exhausted
This diagnosis stopped sending DNS queries after 8000 ms. Checks that needed more lookups report their remaining results as unknown; the domain's records may be unusually large or slow to answer.
All checks
MXCan servers find your inbox?Could not look up MX recordsNeeds attention
- Warning: Could not look up MX records
Some DNS queries needed to check mail delivery for microsoft.com failed (A microsoft-com.mail.protection.outlook.com: TIMEOUT; AAAA microsoft-com.mail.protection.outlook.com: TIMEOUT), so the result is unknown. Try again later; if it persists, check the nameservers involved.
- Info: Only one MX host
All mail for microsoft.com goes to microsoft-com.mail.protection.outlook.com. Most hosted providers make that one name highly available; if you run your own server, consider a backup MX.
SPFWho may send as you?No issues foundPass
Nothing to report.
DKIMAre your emails signed?DKIM key shorter than 2048 bitsNeeds attention
- Warning: DKIM key shorter than 2048 bits
selector2 (1024-bit) uses an RSA key below 2048 bits. Short keys can be factored and some receivers treat them as weak. Rotate to a 2048-bit key at your sending provider.
- Pass: DKIM key published
microsoft.com publishes a DKIM key under selector2.
DMARCWhat happens to fakes?No issues foundPass
Nothing to report.
AlignmentDoes it match your From?No issues foundPass
Nothing to report.
BIMICan inboxes show your logo?Could not look up the BIMI recordNeeds attention
- Warning: Could not look up the BIMI record
The TXT query for default._bimi.microsoft.com returned TIMEOUT, so BIMI status is unknown. Try again later.
MTA-STSIs mail to you encrypted?Could not look up the MTA-STS recordNeeds attention
- Warning: Could not look up the MTA-STS record
The TXT query for _mta-sts.microsoft.com returned TIMEOUT, so MTA-STS status is unknown. Try again later.
TLS-RPTWill you hear about failures?TLS-RPT is configuredPass
- Pass: TLS-RPT is configured
TLS reports will be sent to https://tlsrpt.azurewebsites.net/report.