Email infrastructure of lockly.com

According to Live Direct Marketing's daily DNS scan (September 7, 2026), lockly.com (Tranco rank #20,761) points its inbound MX to Microsoft 365 and authorizes Amazon SES, Mailchimp in SPF. Its observed DMARC policy is p=reject. Across this dataset, 47% of DMARC publishers use an enforcing policy; this does not show where a specific message landed.

Last updated: .

Mailbox provider (MX)Microsoft 365
ESPs in SPFAmazon SES, Mailchimp
SaaS senders in SPFShopify
DMARC policyp=reject
DMARC recordv=DMARC1; p=reject
Tranco rank#20,761
Snapshot2026-09-07 (updated daily)

Keep an eye on lockly.com

Get a first health report, then meaningful changes to SPF, DMARC, MX, sampled MX PTR and blocklists. See your domain history and run a real inbox placement test from your private watchlist.

Manage existing subscriptions →
Monitoring starts only after you explicitly confirm by email. English reports. Stop any time.

How lockly.com compares

Same daily dataset, three views: how its mailbox provider is trending, how strict DMARC is at its position in the list, and where its own policy sits among all DMARC publishers in the dataset.

Market share of Microsoft 365

DMARC enforced by list position

Policy maturity of all DMARC publishers

From observation to a useful check

What was observed
The DNS records and classifications in this snapshot.
What it means
MX describes inbound mail; SPF authorizes senders.
What is unknown
The actual sending IP, nested SPF dependencies, inbox placement and commercial relationships. MTA-STS, TLS-RPT and BIMI adoption are not measured.
Next check
Verify current DNS and test a real message: run an inbox placement test.

DNS records

Source: OpenINTEL / Tranco. Capture: 2026-09-07. These are answers from the measurement vantage point, not a live DNS check. TTL is the observed cache lifetime in seconds.

lockly.com · A — Answer records observed

IPv4 addresses for this name. They do not identify the mail server or prove a hosting migration.

Query observed at: 2026-09-07T00:38:21Z.

Response code: 0.

  • lockly.com · A · TTL 60 s · 2026-09-07T00:38:21Z · AD=0
    23.227.38.32
lockly.com · AAAA — Unknown: no conclusive answer in this capture

IPv6 addresses for this name. An address record does not test service availability.

lockly.com · NS — Answer records observed

Name servers listed for the DNS zone.

Query observed at: 2026-09-07T00:38:21Z.

Response code: 0.

  • lockly.com · NS · TTL 14400 s · 2026-09-07T00:38:21Z · AD=0
    ns1.dreamhost.com.
  • lockly.com · NS · TTL 14400 s · 2026-09-07T00:38:21Z · AD=0
    ns2.dreamhost.com.
  • lockly.com · NS · TTL 14400 s · 2026-09-07T00:38:21Z · AD=0
    ns3.dreamhost.com.
lockly.com · MX — Answer records observed

Servers named to receive mail. Lower preference numbers are tried first.

Query observed at: 2026-09-07T00:38:21Z.

Response code: 0.

  • lockly.com · MX · TTL 60 s · 2026-09-07T00:38:21Z · AD=0
    0 lockly-com.mail.protection.outlook.com.
lockly.com · SOA — Answer records observed

Zone administration data. The serial is a version number, not a creation date or clock.

Query observed at: 2026-09-07T00:38:20Z.

Response code: 0.

  • lockly.com · SOA · TTL 60 s · 2026-09-07T00:38:20Z · AD=0
    expire=1814400; minimum=60; mname=ns1.dreamhost.com.; refresh=19572; retry=600; rname=hostmaster.dreamhost.com.; serial=2026082003
lockly.com · CAA — Unknown: no conclusive answer in this capture

Rules for certificate issuance. These do not show whether an existing certificate is valid.

lockly.com · TXT — Answer records observed

Text records can publish mail policies, domain-control challenges or other data.

Query observed at: 2026-09-07T00:38:21Z.

Response code: 0.

  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuelockly.com · TXT · TTL 60 s · 2026-09-07T00:38:21Z · AD=0
    "1F2A4A7E12"
  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuelockly.com · TXT · TTL 60 s · 2026-09-07T00:38:21Z · AD=0
    "7dvfrug9j8f6eihbvkahfsv7m4s1xq"
  • Domain-control verification for Microsoft; not proof of active SaaS or mail use.

    Raw TXT valuelockly.com · TXT · TTL 60 s · 2026-09-07T00:38:21Z · AD=0
    "MS=ms44887691"
  • Domain-control verification for Google; not proof of active SaaS or mail use.

    Raw TXT valuelockly.com · TXT · TTL 60 s · 2026-09-07T00:38:21Z · AD=0
    "google-site-verification=ewUj2D3j61H7jY2LgWZpHin03TpprtP-wNgsUW5UQ84"
  • Domain-control verification for Klaviyo; not proof of active SaaS or mail use.

    Raw TXT valuelockly.com · TXT · TTL 60 s · 2026-09-07T00:38:21Z · AD=0
    "klaviyo-site-verification=UP9HxH"
  • SPF: authorized mail senders; not proof that mail was sent.

    Raw TXT valuelockly.com · TXT · TTL 60 s · 2026-09-07T00:38:21Z · AD=0
    "v=spf1 include:servers.mcsv.net include:spf.protection.outlook.com include:shops.shopify.com include:amazonses.com -all"
lockly.com · DNSKEY — Unknown: no conclusive answer in this capture

DNSSEC key, signature or denial-of-existence data observed in this response.

lockly.com · DS — Unknown: no conclusive answer in this capture

DNSSEC key, signature or denial-of-existence data observed in this response.

lockly.com · CDS — Unknown: no conclusive answer in this capture

DNSSEC key, signature or denial-of-existence data observed in this response.

lockly.com · CDNSKEY — Unknown: no conclusive answer in this capture

DNSSEC key, signature or denial-of-existence data observed in this response.

www.lockly.com · A — Answer records observed

IPv4 addresses for this name. They do not identify the mail server or prove a hosting migration.

Query observed at: 2026-09-07T00:38:21Z.

Response code: 0.

  • shops.myshopify.com · A · TTL 3600 s · 2026-09-07T00:38:21Z · AD=0
    23.227.38.74
  • www.lockly.com · CNAME · TTL 60 s · 2026-09-07T00:38:21Z · AD=0
    shops.myshopify.com.
www.lockly.com · AAAA — Answer records observed

IPv6 addresses for this name. An address record does not test service availability.

Query observed at: 2026-09-07T00:38:21Z.

Response code: 0.

  • shops.myshopify.com · AAAA · TTL 3600 s · 2026-09-07T00:38:21Z · AD=0
    2620:127:f00f:e::
  • www.lockly.com · CNAME · TTL 60 s · 2026-09-07T00:38:21Z · AD=0
    shops.myshopify.com.
_dmarc.lockly.com · TXT — Answer records observed

Text records can publish mail policies, domain-control challenges or other data.

Query observed at: 2026-09-07T00:38:21Z.

Response code: 0.

  • DMARC: published handling and reporting policy for authentication failures.

    Raw TXT value_dmarc.lockly.com · TXT · TTL 60 s · 2026-09-07T00:38:21Z · AD=0
    "v=DMARC1; p=reject"

DNSSEC records are shown only when returned. An unset AD flag is not proof that a zone is unsigned. MTA-STS, TLS-RPT, BIMI and arbitrary DKIM selectors are not measured here; their absence cannot be inferred.

Recorded DNS history

Registry presence: first seen 2026-04-28; last seen 2026-09-07. These are appearances in our domain registry, not domain registration dates or earlier DNS values.

This history starts with saved RR captures. Provider market-share charts are aggregate context, not this domain’s DNS history. Dates identify observations; no continuous validity between them is implied. Equivalent RR states are combined, ignoring response TTL and capture-time changes. Up to 30 distinct RR states and 60 dated captures are retained within a per-domain byte limit.

No earlier different RR snapshot is available for comparison.

Available saved snapshots
2026-09-07 (equivalent state also recorded on 2026-09-05)

Each query below keeps its own observation date; unknown checks may retain older values.

_dmarc.lockly.com · TXT

2026-09-07 — Answer records observed

  • DMARC: published handling and reporting policy for authentication failures.

    Raw TXT value_dmarc.lockly.com · TXT
    "v=DMARC1; p=reject"

lockly.com · A

2026-09-07 — Answer records observed

  • lockly.com · A
    23.227.38.32

lockly.com · MX

2026-09-07 — Answer records observed

  • lockly.com · MX
    0 lockly-com.mail.protection.outlook.com

lockly.com · NS

2026-09-07 — Answer records observed

  • lockly.com · NS
    ns1.dreamhost.com
  • lockly.com · NS
    ns2.dreamhost.com
  • lockly.com · NS
    ns3.dreamhost.com

lockly.com · SOA

2026-09-07 — Answer records observed

  • lockly.com · SOA
    expire=1814400; minimum=60; mname=ns1.dreamhost.com; refresh=19572; retry=600; rname=hostmaster.dreamhost.com; serial=2026082003

lockly.com · TXT

2026-09-07 — Answer records observed

  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuelockly.com · TXT
    "1F2A4A7E12"
  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuelockly.com · TXT
    "7dvfrug9j8f6eihbvkahfsv7m4s1xq"
  • Domain-control verification for Microsoft; not proof of active SaaS or mail use.

    Raw TXT valuelockly.com · TXT
    "MS=ms44887691"
  • Domain-control verification for Google; not proof of active SaaS or mail use.

    Raw TXT valuelockly.com · TXT
    "google-site-verification=ewUj2D3j61H7jY2LgWZpHin03TpprtP-wNgsUW5UQ84"
  • Domain-control verification for Klaviyo; not proof of active SaaS or mail use.

    Raw TXT valuelockly.com · TXT
    "klaviyo-site-verification=UP9HxH"
  • SPF: authorized mail senders; not proof that mail was sent.

    Raw TXT valuelockly.com · TXT
    "v=spf1 include:servers.mcsv.net include:spf.protection.outlook.com include:shops.shopify.com include:amazonses.com -all"

www.lockly.com · A

2026-09-07 — Answer records observed

  • shops.myshopify.com · A
    23.227.38.74
  • www.lockly.com · CNAME
    shops.myshopify.com

www.lockly.com · AAAA

2026-09-07 — Answer records observed

  • shops.myshopify.com · AAAA
    2620:127:f00f:e::
  • www.lockly.com · CNAME
    shops.myshopify.com

Changes to lockly.com

No entry for this domain appears in the current public change feed. The feed is a selected sample, so this does not establish that its DNS stayed unchanged.

Start monitoring to build a history from your first check, or explore observed changes across the dataset.

SPF diagnostics

Static observations from the published SPF record. No nested include or redirect dependencies were evaluated. The actual sending IP and evaluation path are needed to assess the RFC 7208 limit of 10 DNS-dependent terms.

4DNS-dependent terms — nested dependencies are not checked; headroom is not confirmed
-allfail result for unmatched senders; recipient handling depends on its policy
119 Brecord length · includes-only mechanisms

Modern mail security across the dataset

The required DNS labels are not queried. Adoption is unknown for this domain and for the population. Apex TXT anomalies are listed separately in the security posture report.

MTA-STSNot measured in this dataset
TLS-RPTNot measured in this dataset
BIMINot measured in this dataset

Reverse DNS of inbound MX hosts

These are separately dated observations of inbound MX addresses. They do not identify the actual sending IP. To assess outbound mail, check current forward and reverse DNS of the actual sending IP; FCrDNS and delivery were not measured here.

lockly-com.mail.protection.outlook.com

No current PTR conclusion. The cached observation is stale. Legacy data lacks per-address DNS result codes.

DNS attempt: 2026-07-27 11:47:56 UTC. Per-address query coverage is unavailable in this legacy observation.

Observed IPObserved PTR namesDNS observation
2a01:111:f403:cc09::mail-sg2pr03cu00500.inbound.protection.outlook.comPTR observed
2a01:111:f403:cc1a::8mail-tydpr03cu00100.inbound.protection.outlook.comPTR observed
2a01:111:f403:cc1f::4mail-os8pr02cu00104.inbound.protection.outlook.comPTR observed
52.101.124.117Unknown DNS result
52.101.137.0Unknown DNS result
52.101.157.80Unknown DNS result

Observed PTR names are outside this domain. Name relationships are not a forward-confirmed reverse DNS test.

Where lockly.com stands

The same snapshot cut by zone, by list position and by how alive the published policies are.

How to interpret these observations

MX identifies the observed inbound mailbox or gateway. SPF includes identify services authorised to send for the domain. DMARC shows the published authentication policy. The dataset currently contains 4 populated signal groups for this page.

Observed deliverability context: based on the available observations, this page describes DNS configuration only. It does not represent a complete audit of lockly.com and does not prove that a particular message reaches the inbox or spam folder.

Frequently asked questions

What email provider does lockly.com use?

lockly.com uses Microsoft 365 for inbound mail (detected from its primary MX record) as of September 7, 2026, per Live Direct Marketing's daily Tranco top-1M scan.

What ESP does lockly.com use?

lockly.com authorises Amazon SES, Mailchimp in its SPF record as of September 7, 2026.

Does lockly.com enforce DMARC?

Yes — lockly.com publishes p=reject, the strictest DMARC policy (as of September 7, 2026).

Related domain statistics

Nearby domains in the Tranco ranking: mtsu.edu · sellatuparley.com · adidas.co.in · wnd.com

Browse provider data · Compare historical periods · Run an inbox placement test

Your message may perform differently. Run a controlled inbox placement test to evaluate your own message, sender and creative.
Test My Email

Data: Email infrastructure of the Tranco top-1M, daily snapshot 2026-09-07, derived from OpenINTEL forward-DNS measurements. Cite with the date — records change daily.