{"engine":"checkup","target":"bbc.io","checked_at":"2026-11-01T01:07:35+00:00","cached":false,"duration_ms":2903,"error":null,"score":80,"counts":{"pass":8,"caution":1,"fail":1,"note":10,"skipped":0},"data":{"domain":"bbc.io","facets":{"registry":{"score":100,"counts":{"pass":0,"caution":0,"fail":0,"note":1,"skipped":0},"error":null,"checked_at":"2026-11-01T01:07:35+00:00","duration_ms":163},"dns":{"score":100,"counts":{"pass":3,"caution":0,"fail":0,"note":6,"skipped":0},"error":null,"checked_at":"2026-11-01T01:07:35+00:00","duration_ms":501},"mail":{"score":95,"counts":{"pass":4,"caution":1,"fail":0,"note":3,"skipped":0},"error":null,"checked_at":"2026-11-01T01:07:36+00:00","duration_ms":1513},"web":{"score":85,"counts":{"pass":0,"caution":0,"fail":1,"note":0,"skipped":0},"error":null,"checked_at":"2026-11-01T01:07:38+00:00","duration_ms":61},"reputation":{"score":100,"counts":{"pass":1,"caution":0,"fail":0,"note":0,"skipped":0},"error":null,"checked_at":"2026-11-01T01:07:38+00:00","duration_ms":548}},"summary":{"registered":false,"expires":null,"registrar":null,"nameservers":["ns0.bbcdns.net","ns0.bbcdns.net.uk","ns1.bbcdns.net","ns1.bbcdns.net.uk"],"mx":[],"spoofability":"protected","https":null,"tls_days_left":null,"listed":0,"dns_provider":null,"mail_provider":null,"hosting":null,"headers_grade":null,"tls_score":null}},"findings":[{"level":"note","code":"DOMAIN-AVAILABLE","title":"This domain is not registered","detail":"The registry reports no record for bbc.io. It may be available to register.","facet":"registry"},{"level":"pass","code":"DNS-AXFR-CLOSED","title":"Zone transfers are refused to outsiders","detail":"4 server(s) tested","facet":"dns"},{"level":"pass","code":"DNS-AUTHORITATIVE-OK","title":"All nameservers answer authoritatively","detail":"ns0.bbcdns.net, ns0.bbcdns.net.uk, ns1.bbcdns.net, ns1.bbcdns.net.uk","facet":"dns"},{"level":"pass","code":"DNS-SERIAL-OK","title":"Nameservers agree on the zone serial","detail":"2020062300","facet":"dns"},{"level":"note","code":"DNS-NO-APEX-A","title":"No A record at the apex","detail":"The bare domain does not point at a web server.","facet":"dns"},{"level":"note","code":"DNS-NO-AAAA","title":"No IPv6 (AAAA) address for the apex","facet":"dns"},{"level":"note","code":"DNS-NO-WWW","title":"www does not resolve","detail":"Visitors typing www. in front of the domain will not reach a site.","facet":"dns"},{"level":"note","code":"DNS-NO-MX","title":"No MX records","detail":"Mail for this domain falls back to the A record, or the domain does not receive mail.","facet":"dns"},{"level":"note","code":"DNS-NO-CAA","title":"No CAA record","detail":"Any certificate authority may issue certificates for this domain.","facet":"dns"},{"level":"note","code":"DNSSEC-OFF","title":"DNSSEC is not enabled","facet":"dns"},{"level":"caution","code":"MX-MISSING","title":"No MX records","detail":"Senders will fall back to the A record of the domain. If the domain is not meant to receive mail, publish a null MX.","fix":"Add MX records for your mail provider, or \"MX 0 .\" if the domain never receives mail.","facet":"mail"},{"level":"pass","code":"SPF-LOOKUPS-OK","title":"SPF uses 0 of 10 permitted DNS lookups","facet":"mail"},{"level":"pass","code":"SPF-HARDFAIL-ALL","title":"SPF ends with -all","facet":"mail"},{"level":"note","code":"DKIM-NOT-DISCOVERED","title":"No DKIM key found under common selectors","detail":"Selectors are chosen by the sender, so a key may exist under a name we did not try. Check a real message header for the s= tag.","facet":"mail"},{"level":"pass","code":"DMARC-REJECT","title":"DMARC policy is p=reject","detail":"Spoofed mail that fails authentication is rejected.","facet":"mail"},{"level":"note","code":"DMARC-NO-RUA","title":"No aggregate report address (rua)","detail":"You receive no visibility of who sends as your domain.","facet":"mail"},{"level":"note","code":"MTASTS-NONE","title":"No MTA-STS policy","detail":"Optional; protects inbound mail against TLS downgrade.","facet":"mail"},{"level":"pass","code":"SPOOF-PROTECTED","title":"Spoofing protection: enforced","detail":"SPF and DMARC together reject or quarantine forged mail.","facet":"mail"},{"level":"fail","code":"WEB-UNRESOLVABLE","title":"The host does not resolve to a public address","detail":"bbc.io does not resolve to any address","facet":"web"},{"level":"pass","code":"BLOCKLIST-CLEAN","title":"Not listed on 5 blocklists checked","facet":"reputation"}],"raw":[]}