{
  "domain": "outlook.com",
  "status": "NOERROR",
  "grade": "B",
  "counts": {
    "ok": 5,
    "warn": 1,
    "fail": 0,
    "info": 1
  },
  "checks": [
    {
      "check": "MX",
      "status": "ok",
      "text": "Microsoft (Outlook.com): outlook-com.olc.protection.outlook.com"
    },
    {
      "check": "SPF",
      "status": "ok",
      "text": "ends in -all; 1 of 10 DNS lookups"
    },
    {
      "check": "DMARC",
      "status": "warn",
      "text": "p=none: monitoring only, so mail that fails is still delivered; reports go to rua@dmarc.microsoft",
      "fix": "once the reports show your own mail passes, move to p=quarantine, then p=reject"
    },
    {
      "check": "DKIM",
      "status": "ok",
      "text": "keys at selector1 (2048-bit RSA), selector2 (2048-bit RSA)"
    },
    {
      "check": "MTA-STS",
      "status": "ok",
      "text": "mode enforce, max_age 7 days, and every MX host is covered"
    },
    {
      "check": "TLS-RPT",
      "status": "ok",
      "text": "reports go to https://tlsrpt.azurewebsites.net/report"
    },
    {
      "check": "BIMI",
      "status": "info",
      "text": "no logo (optional: some inboxes show a brand logo next to your mail)"
    }
  ],
  "selector": null,
  "nullMx": false,
  "mx": {
    "records": [
      {
        "priority": 5,
        "host": "outlook-com.olc.protection.outlook.com"
      }
    ],
    "providers": [
      "Microsoft (Outlook.com)"
    ],
    "mixedNull": false
  },
  "spf": {
    "records": 1,
    "record": "v=spf1 include:spf2.outlook.com -all",
    "all": "-all",
    "redirect": null,
    "redirectMacro": false,
    "lookups": 1,
    "overLimit": false,
    "counted": true,
    "includes": [
      "spf2.outlook.com"
    ],
    "errors": [],
    "unresolved": [],
    "passAll": [],
    "ptr": false,
    "macros": false,
    "onlyFail": false
  },
  "dmarc": {
    "record": "v=DMARC1; p=none; sp=quarantine; pct=100; rua=mailto:rua@dmarc.microsoft; ruf=mailto:ruf@dmarc.microsoft; fo=1",
    "policy": "none",
    "subdomainPolicy": "quarantine",
    "nonexistentPolicy": null,
    "pct": 100,
    "testing": false,
    "rua": [
      "rua@dmarc.microsoft"
    ],
    "ruf": [
      "ruf@dmarc.microsoft"
    ],
    "adkim": "relaxed",
    "aspf": "relaxed",
    "records": 1,
    "from": "outlook.com",
    "inherited": false
  },
  "dkim": {
    "selectors": [
      "google",
      "selector1",
      "selector2",
      "default",
      "k1",
      "s1"
    ],
    "keys": [
      {
        "selector": "selector1",
        "keyType": "rsa",
        "revoked": false,
        "bits": 2048,
        "testing": false,
        "record": "v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWyktrIL8DO/+UGvMbv7cPd/Xogpbs7pgVw8y9ldO6AAMmg8+ijENl/c7Fb1MfKM7uG3LMwAr0dVVKyM+mbkoX2k5L7lsROQr0Z9gGSpu7xrnZOa58+/pIhd2Xk/DFPpa5+TKbWodbsSZPRN8z0RY5x59jdzSclXlEyN9mEZdmOiKTsOP6A7vQxfSya9jg5N81dfNNvP7HnWejMMsKyIMrXptxOhIBuEYH67JDe98QgX14oH"
      },
      {
        "selector": "selector2",
        "keyType": "rsa",
        "revoked": false,
        "bits": 2048,
        "testing": false,
        "record": "v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4FtIHuwq9952OTOwVZEofzUo9nZJZV7Hn3zOXBHaEOP71nMs+uCheSeYRH34PLvo9MngvAFxXG4X8dpL35onCZq2uivZrSBid1ZPDiDqTsK8y26vCV/RpVSWeJEO0SWejooFY7RJ1sbSIxj3Yj4n95oysVoNk3OIJcLryIgjPwzoxFyFQKfpfzAuBf0xvAs29JW9whxe1A7J9Z+wJVhVs37o2ua+sMb7ypEhVjoGHJnGpHh"
      }
    ],
    "unanswered": []
  },
  "mtaSts": {
    "record": "v=STSv1; id=20190225000000Z;",
    "records": 1,
    "id": "20190225000000Z",
    "policy": {
      "url": "https://mta-sts.outlook.com/.well-known/mta-sts.txt",
      "version": "STSv1",
      "mode": "enforce",
      "mx": [
        "*.olc.protection.outlook.com"
      ],
      "maxAge": 604800,
      "errors": [],
      "contentType": null
    }
  },
  "tlsRpt": {
    "record": "v=TLSRPTv1;rua=https://tlsrpt.azurewebsites.net/report",
    "records": 1,
    "rua": [
      "https://tlsrpt.azurewebsites.net/report"
    ]
  },
  "bimi": null,
  "unread": {},
  "source": "cloudflare-dns",
  "subrequests": 14
}
