← Check another domain

bbc.co.uk

70/100

B

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	ok	10/10
DKIM selector	missing	0/10
TLS certificate	ok	20/20
WHOIS integrity	whois rate limited	5/10
Subdomain takeover	ct logs busy	10/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

Publish a DKIM key at default._domainkey.bbc.co.uk (v=DKIM1; k=rsa; p=…)
Publish MTA-STS: add _mta-sts.bbc.co.uk TXT and host a policy at https://mta-sts.bbc.co.uk/.well-known/mta-sts.txt
Enable DNSSEC on bbc.co.uk — DS records must be published to the uk zone by your registrar

Details

Area	Detail
DMARC	v=DMARC1;p=reject;aspf=s;adkim=s;pct=100;fo=0;ri=86400; rua=mailto:dmarc_agg@vali.email;
SPF	v=spf1 ip4:212.58.224.0/19 ip4:132.185.0.0/16 +include:spf.sis.bbc.co.uk +include:spf.messagelabs.com ~all
DKIM selectors	—
TLS certificate	Ok (75 days remaining) — CN=GlobalSign RSA OV SSL CA 2018,O=GlobalSign nv-sa,C=BE
WHOIS registrar	—
WHOIS expires	—
Subdomains	CT logs temporarily unavailable — retry shortly
DNSSEC	Unsigned