SurfaceMap › o › outlook.live.com

outlook.live.com

Checked 2026-10-22 10:11 UTC · first added 2026-10-21
!Check could not complete

Domain & DNS

warn

29 passed 2 warn 0 failed

Areas

iRegistration iDelegation !Nameservers !SOA ✓DNSSEC iRecords

Problems

  • !
    Software version disclosed
    Nameservers · These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns2-37.azure-dns.net: "Knot DNS 3.1.2.1770717641.d6b376aff"; ns4-37.azure-dns.info: "Knot DNS 3.1.2.1770717641.d6b376aff". Hide or replace the version string.
    #17
  • !
    Unusual SOA timers
    SOA · refresh 5m is outside 20m–1d; negative caching TTL (minimum) 1m is outside 5m–1d (RFC 2308 recommends 1–3 hours). Current values: refresh 5m, retry 2m, expire 28d, negative TTL 1m.
    #23

Recent checks

!

Full report

Domain & DNS report for outlook.live.com ›

Mail

error

4 passed 2 warn 2 failed 1 errors

lookups failed for dnssec; results are incomplete

Areas

✗SPF ✗DMARC !DKIM iDNSSEC !MX iBIMI

Problems

  • ✗
    Policy: none (monitoring only)
    DMARC · DMARC policy is set to 'none', which only monitors but doesn't protect against spoofing. Consider upgrading to 'quarantine' or ideally 'reject'.
    #4
  • ✗
    No SPF record
    SPF · No SPF record was found for this domain. SPF is important for preventing email spoofing. Add an SPF record to specify which servers are authorized to send email for your domain.
    #6
  • !
    No key under common selectors
    DKIM · The _domainkey name exists but no DKIM key was found under the common selectors. Selectors are provider-specific; check yours with -selector.
    #7
  • !
    No MX records
    MX · No MX records found. If this domain is used for email, add MX records to specify mail servers. If it never receives mail, publish a null MX ("MX 0 .").
    #9

Recent checks

!

Full report

Mail report for outlook.live.com ›