Email Security Analysis of homedepot.com

Complete verification of homedepot.com's SPF, DKIM, DMARC, and MTA-STS records. Find out if this domain is protected against email spoofing.

Last updated: April 15, 2026

90A
This domain is protected against spoofing

SPF

OK
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ip4:148.163.149.217 ip4:148.163.153.207 include:mail.zendesk.com ~all

DKIM

OK
Selectors: selector1, k1, mandrill, dkim, zendesk1, zendesk2

DMARC

OK
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;

MX

OK
mxb-000e6608.gslb.pphosted.com, mxa-000e6608.gslb.pphosted.com, mx0a-000e6608.pphosted.com, mx0b-000e6608.pphosted.com, exchanger2.homedepot.com, exchanger1.homedepot.com

MTA-STS

Missing

No record found

Read the guide

Recommendations

  1. 1Add MTA-STS to enforce TLS encryption for incoming emails

    Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.

Run a live analysis

The results above are updated daily. For an instant check of homedepot.com, run a live analysis.

Analyze homedepot.com live

Guides to understand these results