yahoo.com
Number 52 of the Top 100 · Tranco rank 59
yahoo.com is Yahoo: mail, news, finance and search.
Can yahoo.com be forged?
Can yahoo.com be forged?
No. Receivers that check DMARC refuse mail that forges yahoo.com or its subdomains.
- The exact name
- reject · subdomains reject · reports to Fortra Agari
- Names that copy
- 86 registered lookalikes can send mail. DMARC never sees them. See them →
What we noticed
- The SPF record has a fault: the record has no all mechanism, so it sets no default
- ptr:yahoo.com: the ptr term is deprecated, slow for the receiver, and some receivers ignore it.
- ptr:yahoo.net: the ptr term is deprecated, slow for the receiver, and some receivers ignore it.
Senders it names none named
These are the services the records name. A record can name a service no longer used, and a sender can sign without being named.
SPFno all · 3 of 10 lookups · 8,192 addresses
No all term · 3 of 10 lookups · 0 of 2 void lookups · 8,192 IPv4 addresses · 0 IPv6 blocks · Includes of its senders
Every term and include
DKIM0 keys found
We look under the selectors of the services the records name. A domain can have keys we do not find.
Sending names 2 names, 2 at reject
| Name | Policy | SPF lookups | Reports to |
|---|---|---|---|
| cn.yahoo.com | reject | — | nowhere |
| exchange.yahoo.com | reject (inherited) | — | — |
The first 50 names are checked.
ReportsFortra Agari, and elsewhere on 1 names
Aggregate reports (rua) go to mailto:d@rua.agari.com. Failure reports (ruf) are asked for.
Transport MTA-STS testing · TLS-RPT published · BIMI none
MTA-STS asks senders to deliver to yahoo.com over encrypted connections only. TLS-RPT asks for reports when they cannot. BIMI shows a logo beside mail that passes DMARC at quarantine or reject.
Read on Oct 28, 2026. Check it again yourself →
Watch your own domain's mail this way: Sender Security · the DMARC Report