Running diagnostic
Running your DNS diagnostic…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Jul 27, 2026 12:24 UTC · 7 checks · public report
Solid base — two policy steps remain.
bt.com publishes an enforcing DMARC policy, so mail that forges its domain is quarantined or rejected at the recipient.
v=spf1 include:spf.protection.outlook.com include:www.thrs.bt.com include:smtp1.bt.com ip4:62.7.242.136/29 ip4:62.239.224.234/31 ip4:62.239.224.236/31 ip4:62.239.224.98/31 ip4:193.113.108.40/31 ip4:212.140.59.179 ip4:212.140.56.164 ip4:212.49.128.65 ip4:200.47.123.3 ip4:147.149.196.177 ip4:147.149.100.81 ip4:147.149.196.181 ip4:147.149.100.78 ~allThis means your email signature key is smaller than recommended, so it is easier to break than a modern one. If an attacker can forge that signature, your messages may be more likely to be spoofed or tampered with. The fix is to replace this DKIM selector with a stronger, modern key size and then update the DNS entry for that selector.
One send: the full report — every finding and fix — lands in your inbox, with a free account waiting. Opening it signs you in and starts a 14-day Monitor trial. No card, and you can unsubscribe in one click.
Domain owner? Re-scan any time — or email [email protected] to have this page removed.