windows.com
Number 85 of the Top 100 · Tranco rank 95
windows.com is a Microsoft domain used by Windows itself for services such as activation, the Store and diagnostics.
Can windows.com be forged?
Can windows.com be forged?
The name is refused; email.windows.com is not.
- The exact name
- reject · subdomains reject · no reports asked for
- Names that copy
- 67 registered lookalikes can send mail. DMARC never sees them. See them →
What we noticed
- No DKIM selector answered, so the mail of the domain carries no signature.
Senders it names none named
These are the services the records name. A record can name a service no longer used, and a sender can sign without being named.
SPF-all · 1 of 10 lookups · 1 address
Refuses others · 1 of 10 lookups · 0 of 2 void lookups · 1 IPv4 addresses · 0 IPv6 blocks · Includes of its senders
Every term and include
DKIM0 keys found
We look under the selectors of the services the records name. A domain can have keys we do not find.
Sending names 2 names, 1 at reject
| Name | Policy | SPF lookups | Reports to |
|---|---|---|---|
| email.windows.com | none | 1 | Fortra Agari |
| www.windows.com | reject (inherited) | 1 | — |
Reportsnowhere, and elsewhere on 1 names
Aggregate reports (rua) go to mailto:rua@dmarc.microsoft. Failure reports (ruf) are asked for.
Transport MTA-STS none · TLS-RPT none · BIMI none
MTA-STS asks senders to deliver to windows.com over encrypted connections only. TLS-RPT asks for reports when they cannot. BIMI shows a logo beside mail that passes DMARC at quarantine or reject.
Read on Oct 28, 2026. Check it again yourself →
Watch your own domain's mail this way: Sender Security · the DMARC Report