office.com
Number 19 of the Top 100 · Tranco rank 22
office.com is the web home of Microsoft 365: the web versions of Word, Excel and Outlook, and the start page people sign in to.
Can office.com be forged?
Can office.com be forged?
Partly. Forged mail goes to the spam folder, where people still find it.
- The exact name
- quarantine · subdomains quarantine · no reports asked for
- Names that copy
- 169 registered lookalikes can send mail. DMARC never sees them. See them →
What we noticed
- The domain publishes no SPF record.
- The domain has no SPF record.
- The DMARC policy sends failing mail to the spam folder. A policy of reject stops it.
Senders it names none named
These are the services the records name. A record can name a service no longer used, and a sender can sign without being named.
SPFNo SPF record
DKIM0 keys found
We look under the selectors of the services the records name. A domain can have keys we do not find.
Sending names 1 name, 0 at reject
| Name | Policy | SPF lookups | Reports to |
|---|---|---|---|
| email.office.com | none | 1 | nowhere |
The first 50 names are checked.
Reportsnowhere, on every name
Aggregate reports (rua) go to mailto:rua@dmarc.microsoft. Failure reports (ruf) are asked for.
Transport MTA-STS testing · TLS-RPT none · BIMI none
MTA-STS asks senders to deliver to office.com over encrypted connections only. TLS-RPT asks for reports when they cannot. BIMI shows a logo beside mail that passes DMARC at quarantine or reject.
Read on Oct 28, 2026. Check it again yourself →
Watch your own domain's mail this way: Sender Security · the DMARC Report