bbc.co.uk

Live email deliverability and anti-spoofing audit. Every value below was read from public DNS at the moment this page was generated.

Findings

• spf

  SPF ends in ~all (softfail); unauthorised mail is marked rather than rejected.

  v=spf1 ip4:212.58.224.0/19 ip4:132.185.0.0/16 +include:spf.sis.bbc.co.uk +include:spf.messagelabs.com ~all

  Fix: Move to -all once you have confirmed all senders are listed.

• dkim

  No DKIM key found at any common selector. Either DKIM is not configured, or it uses a custom selector we cannot discover from DNS alone.

  Fix: Enable DKIM signing at your mail provider and publish the selector they give you.

• mta sts

  No MTA-STS policy, so inbound mail can be downgraded to an unencrypted connection.

  Fix: Publish _mta-sts.bbc.co.uk and host a policy at https://mta-sts.bbc.co.uk/.well-known/mta-sts.txt.

• mx

  2 mail exchangers published.

  10 cluster1.eu.messagelabs.com, 20 cluster1a.eu.messagelabs.com

• dmarc

  DMARC is enforcing with p=reject.

  v=DMARC1;p=reject;aspf=s;adkim=s;pct=100;fo=0;ri=86400; rua=mailto:dmarc_agg@vali.email;

• bimi

  BIMI is published; supporting clients can show your logo.

  v=BIMI1; l=https://vmc.digicert.com/ffc97feb-eec4-4634-888d-2ce5bfa3aabf.svg; a=https://vmc.digicert.com/ffc97feb-eec4-4634-888d-2ce5bfa3aabf.pem

Records

curl "https://mailgrade.dev/v1/domain?domain=bbc.co.uk"

Check another domain