who.int email security: SPF, DKIM & DMARC
Is who.int spoofable? See who.int's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.
Last updated: August 8, 2026
SPF
OKv=spf1 ip4:158.232.12.0/24 include:spf.protection.outlook.com include:_spfincludes.who.int -allDKIM
OKSelectors: selector1DMARC
OKv=DMARC1; p=reject; pct=100; fo=1; ri=3600; rua=mailto:422b6d07@inbox.ondmarc.com,mailto:dmarc-rua@who.int;MX
OKwho-int.mail.protection.outlook.comRecommendations
1Add MTA-STS to enforce TLS encryption for incoming emails
Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.
Run a live analysis
The results above are updated daily. For an instant check of who.int, run a live analysis.
Analyze who.int liveShow off your score
Show visitors that who.int is protected against email spoofing — the badge links to your live report.
<a href="https://spoofchecker.online/en/email-security/who.int" target="_blank" rel="noopener"><img src="https://spoofchecker.online/api/badge/who.int?score=90&grade=A" alt="Email security score for who.int" height="28"></a>Frequently asked questions about who.int
Is who.int spoofable?
No. who.int is protected against email spoofing with a robust configuration. Email security score: 90/100 (grade A).
Does who.int have an SPF record?
Yes, who.int publishes an SPF record (-all qualifier).
What is who.int's DMARC record?
who.int publishes a DMARC record (_dmarc.who.int) with a p=reject policy.
Does who.int use DKIM?
Yes, DKIM signatures were detected for who.int.
Want to test another domain? Run a free email spoofing test.
Guides to understand these results
SPF Guide
Understand how SPF defines which servers are authorized to send emails for a domain.
DKIM Guide
Discover how DKIM cryptographically signs your emails to guarantee their authenticity.
DMARC Guide
Learn how DMARC orchestrates SPF and DKIM to protect your domain.
MTA-STS Guide
Learn how MTA-STS enforces TLS encryption to protect your emails in transit.
SPF vs DKIM vs DMARC
Compare the three protocols and understand how they work together.