bbc.io

Findings

• Fail The host does not resolve to a public address WEB-UNRESOLVABLE

  bbc.io does not resolve to any address

  Read the fix guide →

• Caution No MX records MX-MISSING

  Senders will fall back to the A record of the domain. If the domain is not meant to receive mail, publish a null MX.

  How to fix: Add MX records for your mail provider, or "MX 0 ." if the domain never receives mail.

  Read the fix guide →

• Note This domain is not registered DOMAIN-AVAILABLE

  The registry reports no record for bbc.io. It may be available to register.

• Note No A record at the apex DNS-NO-APEX-A

  The bare domain does not point at a web server.

  Read the fix guide →

• Note No IPv6 (AAAA) address for the apex DNS-NO-AAAA

  Read the fix guide →
• Note www does not resolve DNS-NO-WWW

  Visitors typing www. in front of the domain will not reach a site.

  Read the fix guide →

• Note No MX records DNS-NO-MX

  Mail for this domain falls back to the A record, or the domain does not receive mail.

  Read the fix guide →

• Note No CAA record DNS-NO-CAA

  Any certificate authority may issue certificates for this domain.

  Read the fix guide →

• Note DNSSEC is not enabled DNSSEC-OFF

  Read the fix guide →
• Note No DKIM key found under common selectors DKIM-NOT-DISCOVERED

  Selectors are chosen by the sender, so a key may exist under a name we did not try. Check a real message header for the s= tag.

  Read the fix guide →

• Note No aggregate report address (rua) DMARC-NO-RUA

  You receive no visibility of who sends as your domain.

  Read the fix guide →

• Note No MTA-STS policy MTASTS-NONE

  Optional; protects inbound mail against TLS downgrade.

• Pass Zone transfers are refused to outsiders DNS-AXFR-CLOSED

  4 server(s) tested

• Pass All nameservers answer authoritatively DNS-AUTHORITATIVE-OK

  ns0.bbcdns.net, ns0.bbcdns.net.uk, ns1.bbcdns.net, ns1.bbcdns.net.uk

• Pass Nameservers agree on the zone serial DNS-SERIAL-OK

  2020062300

• Pass SPF uses 0 of 10 permitted DNS lookups SPF-LOOKUPS-OK
• Pass SPF ends with -all SPF-HARDFAIL-ALL
• Pass DMARC policy is p=reject DMARC-REJECT

  Spoofed mail that fails authentication is rejected.

• Pass Spoofing protection: enforced SPOOF-PROTECTED

  SPF and DMARC together reject or quarantine forged mail.

• Pass Not listed on 5 blocklists checked BLOCKLIST-CLEAN

By facet

The score starts at 100 and loses 15 per fail and 5 per caution. Notes are informational. Findings above are grouped from every facet; open a facet for its records and raw data.