SurfaceMap › o › office365.com

office365.com

Checked 2026-10-22 10:05 UTC · first added 2026-10-21
!Passed with warnings Score 85 of 100

Domain & DNS

warn

30 passed 2 warn 0 failed

Areas

iRegistration iDelegation !Nameservers !SOA iDNSSEC ✓Records

Problems

  • !
    Software version disclosed
    Nameservers · These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns4-07.azure-dns.info: "Knot DNS 3.1.2.1770717641.d6b376aff". Hide or replace the version string.
    #17
  • !
    Unusual SOA timers
    SOA · refresh 5m is outside 20m–1d; negative caching TTL (minimum) 1m is outside 5m–1d (RFC 2308 recommends 1–3 hours). Current values: refresh 5m, retry 2m, expire 28d, negative TTL 1m.
    #23

Recent checks

!

Full report

Domain & DNS report for office365.com ›

Mail

warn

18 passed 3 warn 0 failed

Areas

✓SPF ✓DMARC !DKIM ✓DNSSEC !MX !TLS iBIMI

Problems

  • !
    No key under common selectors
    DKIM · The _domainkey name exists but no DKIM key was found under the common selectors. Selectors are provider-specific; check yours with -selector.
    #7
  • !
    No MX records
    MX · No MX records found. If this domain is used for email, add MX records to specify mail servers. If it never receives mail, publish a null MX ("MX 0 .").
    #9
  • !
    Policy in testing mode
    TLS · With mode: testing, senders only report TLS problems (via TLS-RPT) and still deliver without TLS. Switch to mode: enforce once reports are clean.
    #33

Recent checks

!

Full report

Mail report for office365.com ›