sharepoint.com
Number 39 of the Top 100 · Tranco rank 44
sharepoint.com hosts SharePoint and OneDrive for Microsoft 365 customers. Each company gets its own name, such as contoso.sharepoint.com. Attackers also share files from their own SharePoint tenants, so a link to sharepoint.com is only as safe as the company it belongs to.
Can sharepoint.com be forged?
Can sharepoint.com be forged?
No. Receivers that check DMARC refuse mail that forges sharepoint.com or its subdomains.
- The exact name
- reject · subdomains reject · no reports asked for
- Names that copy
- 86 registered lookalikes can send mail. DMARC never sees them. See them →
Senders it names Microsoft 365
- Microsoft 365 include:spf.protection.outlook.com· DKIM key found
- Microsoft 365 runs its mail hosts
These are the services the records name. A record can name a service no longer used, and a sender can sign without being named.
SPF-all · 5 of 10 lookups · 459 thousand addresses
Refuses others · 5 of 10 lookups · 0 of 2 void lookups · 458,836 IPv4 addresses · 5 IPv6 blocks · Includes of its senders
Every term and include
DKIM1 key found
- selector1._domainkey · rsa 2048· Microsoft 365
We look under the selectors of the services the records name. A domain can have keys we do not find.
Sending names none found
No subdomain of sharepoint.com that we found publishes mail records.
The first 50 names are checked.
ReportsNo reports asked for
Aggregate reports (rua) go to mailto:rua@dmarc.microsoft. Failure reports (ruf) are asked for.
Transport MTA-STS none · TLS-RPT none · BIMI none
MTA-STS asks senders to deliver to sharepoint.com over encrypted connections only. TLS-RPT asks for reports when they cannot. BIMI shows a logo beside mail that passes DMARC at quarantine or reject.
Read on Oct 28, 2026. Check it again yourself →
Watch your own domain's mail this way: Sender Security · the DMARC Report