InboxAudit

aa.com email records

What aa.com publishes in public DNS for SPF, DKIM, DMARC, MX and BIMI, resolved on 2026-08-04.

SPF

v=spf1 include:spf.protection.outlook.com include:onprem.aa.com include:_spf-dc4.sapsf.com include:spf.aa.com ip4:169.55.103.7 ip4:169.55.103.8 ip4:169.44.200.37 ip4:169.44.200.38 ip4:136.147.176.0/20 ip4:13.111.0.0/18 ip4:70.42.227.151 ip4:70.42.227.152 ip4:146.20.91.152 ip4:146.20.91.153 ip4:66.48.80.132 ip4:204.232.172.40 ip4:161.47.34.7 ip4:108.166.43.0/24 ip4:173.203.2.22 ip4:12.104.201.5 ip4:91.198.224.29/32 ip4:194.37.255.29/32 ~all
9 of 10 DNS lookups — close to the limit.

The record authorises this sending platform: Microsoft 365.

DMARC

v=DMARC1; p=reject; sp=reject; fo=1; ri=3600; rua=mailto:dmarc@aa.com; ruf=mailto:dmarc@aa.com
policy
p=reject
subdomains
sp=reject
applies to
100% of mail
reports
mailto:dmarc@aa.com
alignment
adkim=r, aspf=r

DKIM

Keys found on 3 of 10 probed selectors:

selector2k1s1

MX

aa-com.mail.protection.outlook.com

Notes on this configuration

SPF uses 9 of the 10 permitted DNS lookups.

Check it live

The above is a snapshot from 2026-08-04. Re-resolve it now: