Email Security Analysis of cmhc.org
Complete verification of cmhc.org's SPF, DKIM, DMARC, and MTA-STS records. Find out if this domain is protected against email spoofing.
Last updated: April 15, 2026
SPF
OKv=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com a mx ip4:208.64.181.100 ip4:70.36.20.116 ip4:67.23.62.36 ip4:67.23.61.36 ip4:173.63.149.34 ip4:206.208.206.55 include:spf.protection.outlook.com include:spf-00245203.pphosted.com -allDKIM
OKSelectors: selector1DMARC
OKv=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;MX
OKmxa-00245203.gslb.pphosted.com, mxb-00245203.gslb.pphosted.comRecommendations
1Add MTA-STS to enforce TLS encryption for incoming emails
Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.
Run a live analysis
The results above are updated daily. For an instant check of cmhc.org, run a live analysis.
Analyze cmhc.org liveGuides to understand these results
SPF Guide
Understand how SPF defines which servers are authorized to send emails for a domain.
DKIM Guide
Discover how DKIM cryptographically signs your emails to guarantee their authenticity.
DMARC Guide
Learn how DMARC orchestrates SPF and DKIM to protect your domain.
MTA-STS Guide
Learn how MTA-STS enforces TLS encryption to protect your emails in transit.
SPF vs DKIM vs DMARC
Compare the three protocols and understand how they work together.