Reading the records…
Reading the records…
Unrecognised domains count as one organisation each, so the true number may be lower.
Asking 2 registries for registration dates.
Registration dates never change the grade; most domains renew automatically.
No SPF record, so nothing outside is approved to send as you, and nothing is refused either.
No mail servers published.
Named in DMARC. Your sending reports go to these.
Not in our catalogue
Falling means someone else controls its DNS, by lapse or hijack.
Your DMARC reports go to them, listing the servers sending as mail-cy5pr05cu00100.inbound.protection.outlook.com and how much. Failure reports can also carry parts of individual messages.
Asking the registry.
Built from SPF, MX and DMARC report addresses. Your DNS host and DKIM services are not shown, as public DNS does not list them. This shows what is at stake, not current risk.