Fabrikam Dental Group
fabrikam.onmicrosoft.com
SPF, DMARC and DKIM stop other people sending email as the client's domains. MTA-STS and TLS-RPT make other servers deliver mail to them encrypted, and report when they can't.
| Domain | Receives mail via | SPF | DMARC | DKIM | TLS‑RPT |
|---|---|---|---|---|---|
| fabrikam.example medium | Microsoft 365 | Pass | Weak | Weak | Missing |
What to fix: DMARC is monitor-only (p=none); spoofed mail is still delivered; Microsoft 365 DKIM isn't set up (selector2 CNAME missing); No MTA-STS policy, so mail sent to this domain can be forced onto an unencrypted connection | |||||
| parked.example low | Doesn't receive mail | Missing | Missing | n/a | n/a |
What to fix: Doesn't receive mail but has no "v=spf1 -all" record to stop spoofing; Doesn't receive mail but has no DMARC p=reject record | |||||
| Domain | SPF record | DNS lookups | DMARC record | MTA‑STS policy | TLS‑RPT record | MX |
|---|---|---|---|---|---|---|
| fabrikam.example | v=spf1 include:spf. | 1 | v=DMARC1; p=none; rua=mailto:dmarc@ | None | None | fabrikam-example. |
| parked.example | None | None | None | None |
Data from Email domains ().