Skip to content
whois.me.uk
Menu
Sign in

bbc.org.uk

domain Spoofable

Mail by Broadcom (Symantec) Email Security · Mail handled by cluster1.eu.messagelabs.com, cluster1a.eu.messagelabs.com

Re-run JSON PDF Snapshot Watch this
50 / 100 · Needs attention 2 pass 1 caution 3 fail 2 note Checked 5 seconds ago · 4951 ms

Findings

  • Fail No SPF record SPF-MISSING

    Receivers cannot tell which servers may send mail for this domain, and DMARC cannot pass on SPF.

    How to fix: Publish a TXT record such as "v=spf1 include:<your provider> -all".

    Read the fix guide →

  • Fail No DMARC record DMARC-MISSING

    Without DMARC, SPF and DKIM results are advisory and spoofed mail is not rejected. Google and Yahoo require DMARC from bulk senders.

    How to fix: Publish _dmarc.bbc.org.uk TXT "v=DMARC1; p=none; rua=mailto:dmarc@bbc.org.uk" and move to p=quarantine, then p=reject.

    Read the fix guide →

  • Fail Spoofing protection: none SPOOF-EXPOSED

    Anyone can send mail that appears to come from this domain and most receivers will accept it.

    How to fix: Publish SPF with -all, sign with DKIM, then publish DMARC and enforce it.

    Read the fix guide →

  • Caution Certificate on cluster1a.eu.messagelabs.com does not match the MX name SMTP-CERT-MISMATCH

    [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'cluster1a.eu.messagelabs.com'. (_ssl.c:1010)

    How to fix: MTA-STS and DANE both require the certificate to match the MX hostname.

    Read the fix guide →

  • Note No DKIM key found under common selectors DKIM-NOT-DISCOVERED

    Selectors are chosen by the sender, so a key may exist under a name we did not try. Check a real message header for the s= tag.

    Read the fix guide →

  • Note No MTA-STS policy MTASTS-NONE

    Optional; protects inbound mail against TLS downgrade.

  • Pass cluster1.eu.messagelabs.com supports STARTTLS (TLSv1.3) SMTP-STARTTLS-OK

    TLS_AES_256_GCM_SHA384

  • Pass cluster1a.eu.messagelabs.com supports STARTTLS (TLSv1.3) SMTP-STARTTLS-OK

    TLS_AES_256_GCM_SHA384

Mail servers (MX)

PrefHostAddressReverse DNSSMTP (port 25)
10 cluster1.eu.messagelabs.com 85.158.142.213, 85.158.142.217, 195.245.230.192, 195.245.230.197 mail837.messagelabs.com ✓
mail830.messagelabs.com ✓
 220 banner in 1190 ms
STARTTLS TLSv1.3 TLS_AES_256_GCM_SHA384
cert: mail837.messagelabs.com valid · until May 9 23:59:59 2027 GMT
20 cluster1a.eu.messagelabs.com 34.91.159.228 228.159.91.34.bc.googleusercontent.com ✓
 220 banner in 20 ms
STARTTLS TLSv1.3 TLS_AES_256_GCM_SHA384
cert: invalid

SPF

No SPF record published.

DMARC

No DMARC record published.

DKIM

No key found under 54 common selectors.

Selectors are chosen by the sending service, so a key can exist under a name not tried here. The s= tag in a real message header names it.

Transport security

MTA-STS
not published
TLS-RPT
not published
BIMI
not published

Open relay test owners only

Checks whether each mail server accepts mail for recipients at other domains, which spammers exploit. Because the test sends SMTP commands to your server, it is only offered to verified owners.

Create an account and verify the domain to run this test.