linkedin.com
Number 16 of the Top 100 · Tranco rank 18
linkedin.com is LinkedIn, the professional network owned by Microsoft. Its sign-in and share buttons appear on many other sites.
Can linkedin.com be forged?
Can linkedin.com be forged?
No. Receivers that check DMARC refuse mail that forges linkedin.com or its subdomains.
- The exact name
- reject · subdomains reject · reports to Fortra Agari
- Names that copy
- 109 registered lookalikes can send mail. DMARC never sees them. See them →
What we noticed
- The SPF record marks an unlisted sender as a soft failure. A hard failure is stronger.
Senders it names none named
These are the services the records name. A record can name a service no longer used, and a sender can sign without being named.
SPF~all · 2 of 10 lookups · 924 addresses
Flags others · 2 of 10 lookups · 0 of 2 void lookups · 924 IPv4 addresses · 4 IPv6 blocks · Flattened into address terms
Every term and include
DKIM1 key found
- google._domainkey · rsa 1024· Google Workspace
We look under the selectors of the services the records name. A domain can have keys we do not find.
Sending names 1 name, 1 at reject
| Name | Policy | SPF lookups | Reports to |
|---|---|---|---|
| mail.linkedin.com | reject (inherited) | 1 | — |
The first 50 names are checked.
ReportsFortra Agari
Aggregate reports (rua) go to mailto:d@rua.agari.com, mailto:yfy3q-9359@rua.dmarc.emailanalyst.com. Failure reports (ruf) are asked for.
Transport MTA-STS none · TLS-RPT published · BIMI none
MTA-STS asks senders to deliver to linkedin.com over encrypted connections only. TLS-RPT asks for reports when they cannot. BIMI shows a logo beside mail that passes DMARC at quarantine or reject.
Read on Oct 28, 2026. Check it again yourself →
Watch your own domain's mail this way: Sender Security · the DMARC Report