gov.uk
Live email deliverability and anti-spoofing audit. Every value below was read from public DNS at the moment this page was generated.
55/100 — Significant gaps. Delivery problems and spoofing are both likely. Does not accept mail · Protected against spoofing
Findings
-
mx
No MX records. Mail sent to this domain has no defined destination.
Fix: Publish MX records pointing at your mail host.
-
dkim
The zone answers for every name under _domainkey, so we cannot tell which DKIM selectors are real. A wildcard here also lets anyone claim a selector on this domain.
mailgrade-wildcard-sentinel._domainkey.gov.uk answers
Fix: Remove the wildcard record covering _domainkey and publish only the selectors your mail provider issued.
-
spf
SPF is published and enforcing.
v=spf1 -all
-
dmarc
DMARC is enforcing with p=reject.
v=DMARC1;p=reject;sp=none;np=reject;adkim=s;aspf=s;fo=1;rua=mailto:dmarc-rua@dmarc.service.gov.uk
-
dnssec
DNSSEC is validating, so these records cannot be silently tampered with in transit.
AD flag set
Records
| MX | none |
|---|---|
| SPF | v=spf1 -all |
| DMARC | v=DMARC1;p=reject;sp=none;np=reject;adkim=s;aspf=s;fo=1;rua=mailto:dmarc-rua@dmarc.service.gov.uk |
| DKIM selectors | none discovered |
| MTA-STS | not published |
| TLS-RPT | not published |
| BIMI | not published |
| DNSSEC | validating |
Same data, as JSON, in one request. No SMTP probing, no stored recipient data, 250 free calls a month.
curl "https://mailgrade.dev/v1/domain?domain=gov.uk"
Also available: /v1/verify?email=… for individual addresses, and
/v1/verify/batch for lists.