Email Security Analysis of queensu.ca
Complete verification of queensu.ca's SPF, DKIM, DMARC, and MTA-STS records. Find out if this domain is protected against email spoofing.
Last updated: April 15, 2026
SPF
Warningv=spf1 mx ip4:216.146.32.152 ip4:216.146.32.153 ip4:216.146.32.154 ip4:70.33.217.128/28 ip4:159.242.114.214 ip4:50.31.47.101 ip4:75.101.161.27 ip4:54.166.123.167 ip4:34.236.72.193 ip4:44.194.182.36 ip4:52.58.202.240 ip4:18.194.112.206 ip4:142.0.187.42 ip4:66.45.4.80 ip4:199.188.157.80 ip4:184.173.105.83 ip4:168.245.1.157 include:mail.zendesk.com include:a._spf.brightspace.com include:azure.queensu.ca include:_spf.salesforce.com include:spf.mandrillapp.com include:_spf.qualtrics.com include:spf.protection.outlook.com ~allDKIM
OKSelectors: mandrill, mail, s1, s2DMARC
Warningv=DMARC1; p=none; sp=none; aspf=r; rua=mailto:dura.agg@queensu.ca; ruf=mailto:dura.agg@queensu.ca; rf=afrf; pct=100; ri=86400MX
OKqueensu-ca.mail.protection.outlook.com, mailgw.queensu.ca, mail.queensu.ca, bc600d.its.queensu.ca, bc600d.azure.queensu.ca, bc600b.its.queensu.ca, bc600b.azure.queensu.caRecommendations
1Change your DMARC policy from p=none to p=reject to block spoofing
With p=none, your DMARC record only monitors — it doesn't actually block spoofed emails. Attackers can still send emails as your domain and they'll be delivered normally. Switching to p=reject instructs receiving servers to drop fraudulent messages before they reach the inbox.
2Harden your SPF by replacing ~all with -all (hardfail)
With ~all (softfail), unauthorized senders are flagged but emails are usually still delivered. Switching to -all (hardfail) explicitly tells receiving servers to reject emails from unauthorized sources, providing much stronger protection against spoofing.
3Add MTA-STS to enforce TLS encryption for incoming emails
Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.
Need help securing your domain?
If you're not sure how to apply these fixes, get in touch and we'll help you out.
Contact usRun a live analysis
The results above are updated daily. For an instant check of queensu.ca, run a live analysis.
Analyze queensu.ca liveGuides to understand these results
SPF Guide
Understand how SPF defines which servers are authorized to send emails for a domain.
DKIM Guide
Discover how DKIM cryptographically signs your emails to guarantee their authenticity.
DMARC Guide
Learn how DMARC orchestrates SPF and DKIM to protect your domain.
MTA-STS Guide
Learn how MTA-STS enforces TLS encryption to protect your emails in transit.
SPF vs DKIM vs DMARC
Compare the three protocols and understand how they work together.