SPF and DMARC records for live.com

Live SPF and DMARC lookup for live.com: the raw TXT records and the policy they enforce.

try:

Accepts mail
mail hosts
live-com.olc.protection.outlook.com
provider
microsoft
spf record
v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com include:spf.protection.outlook.com ~all
dmarc policy
none
dmarc record
v=DMARC1; p=none; sp=quarantine; pct=100; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1
disposable domain
no
free consumer provider
yes

SPF for live.com

live.com publishes an SPF record; it authorises 5 included sender lists, and the record ends in ~all (soft fail): mail from unlisted servers is marked suspicious but usually still delivered.

DMARC for live.com

The DMARC policy for live.com is p=none: the domain collects authentication reports but asks receivers not to act on failures. Spoofed mail is still delivered; the owner just gets told about it.

Why it matters

SPF says which servers may send as live.com; DKIM signs the messages; DMARC tells receivers what to do when neither checks out and reports back to the owner. Together they decide whether mail from live.com is trusted, and whether someone else can pretend to be live.com. For verification they are a domain-quality signal: Spaw folds a missing SPF record into the risk score and reports has_spf and dmarc_policy on every email and domain lookup.

More checks for live.com

checked 2026-09-03 · sources: live-dns 2026-09-03 · disposable-domains 2026-09-02 · free-provider-domains 2026-09-02 · mx-provider-patterns 2026-09-03

Need this at scale?

The Spaw API runs the same checks plus mailbox-level SMTP verification, batch and bulk endpoints, and list monitoring — 10 free lookups a month, no card required.

Get your API key