DNS & Domain Details
Every record, the providers behind them, and who the domain is registered to.
Mail provider
Unidentified
DNS host
Unidentified
Registrar
Nominet UK
Expires
—
Warnings
Worth fixing — each one is a gap or a single point of failure.
- No CAA recordsWithout a CAA record, any public certificate authority may issue a certificate for this domain. Publishing CAA restricts issuance to the CAs you actually use and is a cheap, high-value control.
Worth knowing
- All nameservers share one parent domainEvery nameserver sits under nic.uk. That is normal for a managed DNS provider, but it does mean one provider outage takes the domain offline. Secondary DNS with a second provider removes that dependency.
- No MX recordsThis domain cannot receive mail. If that is intentional, publish a null MX record ("0 .") so senders are told explicitly rather than left guessing.
Looking good
- DNSSEC is enabledThe registry holds a signed delegation, so responses for this domain can be cryptographically validated.
- Transfer lock is setThe domain cannot be transferred away without first unlocking it, which is the basic defence against domain hijacking.
Email authentication records
These live at underscore-prefixed names, so none of them appear in the record tables below — those query the domain itself.
| Name | Type | Value |
|---|---|---|
| _dmarc.gov.uk check DMARC | DMARC | v=DMARC1;p=reject;sp=none;np=reject;adkim=s;aspf=s;fo=1;rua=mailto:dmarc-rua@dmarc.service.gov.uk |
| default._bimi.gov.uk check BIMI | BIMI | not published |
| _mta-sts.gov.uk check MTA-STS | MTA-STS | not published |
| _smtp._tls.gov.uk check TLS-RPT | TLS-RPT | not published |
| selector1._domainkey.gov.uk Microsoft 365 | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| selector2._domainkey.gov.uk Microsoft 365 | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| google._domainkey.gov.uk Google Workspace | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| 1984._domainkey.gov.uk 1984 Hosting | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| default._domainkey.gov.uk generic default | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| dkim._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mail._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| email._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| key1._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| key2._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| s1._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| s2._domainkey.gov.uk s2 / various | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| k1._domainkey.gov.uk Mailchimp / generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| k2._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| k3._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| smtp._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mx._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| x._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mandrill._domainkey.gov.uk Mailchimp Transactional | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mailchimp._domainkey.gov.uk Mailchimp | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| sendgrid._domainkey.gov.uk SendGrid | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| s1024._domainkey.gov.uk SendGrid | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| smtpapi._domainkey.gov.uk SendGrid | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mailjet._domainkey.gov.uk Mailjet | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mailgun._domainkey.gov.uk Mailgun | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mg._domainkey.gov.uk Mailgun | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| krs._domainkey.gov.uk Klaviyo | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| klaviyo._domainkey.gov.uk Klaviyo | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| sparkpost._domainkey.gov.uk SparkPost | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| scph0819._domainkey.gov.uk SparkPost | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| pm._domainkey.gov.uk Postmark | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| pmta._domainkey.gov.uk PowerMTA | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| hs1._domainkey.gov.uk HubSpot | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| hs2._domainkey.gov.uk HubSpot | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| hubspot._domainkey.gov.uk HubSpot | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| sm._domainkey.gov.uk SalesManago / various | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| sfmc._domainkey.gov.uk Salesforce Marketing Cloud | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| sfdc._domainkey.gov.uk Salesforce | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| et._domainkey.gov.uk Salesforce ExactTarget | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| zendesk1._domainkey.gov.uk Zendesk | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| zendesk2._domainkey.gov.uk Zendesk | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| intercom._domainkey.gov.uk Intercom | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| freshdesk._domainkey.gov.uk Freshdesk | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| zoho._domainkey.gov.uk Zoho | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| zohomail._domainkey.gov.uk Zoho | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| amazonses._domainkey.gov.uk Amazon SES | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| ses._domainkey.gov.uk Amazon SES | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| protonmail._domainkey.gov.uk Proton Mail | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| protonmail2._domainkey.gov.uk Proton Mail | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| protonmail3._domainkey.gov.uk Proton Mail | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| fm1._domainkey.gov.uk Fastmail | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| fm2._domainkey.gov.uk Fastmail | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| fm3._domainkey.gov.uk Fastmail | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mesmtp._domainkey.gov.uk Fastmail | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| titan1._domainkey.gov.uk Titan | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| titan2._domainkey.gov.uk Titan | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| cm._domainkey.gov.uk Campaign Monitor | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| dkimrnd._domainkey.gov.uk various | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mailer._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mailo._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| bounce._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| news._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| notify._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| noreply._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| support._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| info._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| ml._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| m1._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| sig1._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| sel1._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| sel2._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| dk._domainkey.gov.uk legacy DomainKeys | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| dkim1._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| ctct1._domainkey.gov.uk Constant Contact | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| ctct2._domainkey.gov.uk Constant Contact | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| sp._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| proddkim._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| prod._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| test._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| beta._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mimecast._domainkey.gov.uk Mimecast | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mimecast20200928._domainkey.gov.uk Mimecast | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mimecast20230101._domainkey.gov.uk Mimecast | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mc._domainkey.gov.uk Mimecast / Mailchimp | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| dkim2._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| selector3._domainkey.gov.uk Microsoft 365 | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| everlytickey1._domainkey.gov.uk Everlytic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| everlytickey2._domainkey.gov.uk Everlytic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| eversrv._domainkey.gov.uk Everlytic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mxvault._domainkey.gov.uk MxVault | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| sig._domainkey.gov.uk generic | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| sendinblue._domainkey.gov.uk Brevo (Sendinblue) | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| brevo._domainkey.gov.uk Brevo | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| mailerlite._domainkey.gov.uk MailerLite | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| ml1._domainkey.gov.uk MailerLite | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| omnisend._domainkey.gov.uk Omnisend | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| drip._domainkey.gov.uk Drip | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| braze._domainkey.gov.uk Braze | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| iterable1._domainkey.gov.uk Iterable | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
| iterable2._domainkey.gov.uk Iterable | DKIM 512-bit | v=DMARC1;p=reject;rua=mailto:govuk-rua@dmarc.service.gov.uk |
100 DKIM keys found by probing
100 selector names.
DKIM has no directory: the selector is chosen by whoever signs the mail and appears only in a
message’s DKIM-Signature header, so no tool can enumerate them. We probe the names real
providers use, and add any suggested by this domain’s own SPF record.
To check a selector you already know,
give it to the DKIM tool directly.
Registration
| Registrar | Nominet UK |
| Created | — |
| Expires | — |
| DNSSEC | signed |
| Abuse contact | abuse@nominet.uk |
| Status | server update prohibited, server delete prohibited, server transfer prohibited |
From rdap.nominet.uk over RDAP.
IPv4 addresses A
| Name | TTL | Value |
|---|---|---|
| gov.uk | 1h | 151.101.0.144 |
| gov.uk | 1h | 151.101.64.144 |
| gov.uk | 1h | 151.101.128.144 |
| gov.uk | 1h | 151.101.192.144 |
IPv6 addresses AAAA
| Name | TTL | Value |
|---|---|---|
| gov.uk | 1h | 2a04:4e42:600::144 |
| gov.uk | 1h | 2a04:4e42::144 |
| gov.uk | 1h | 2a04:4e42:e00::144 |
| gov.uk | 1h | 2a04:4e42:a00::144 |
| gov.uk | 1h | 2a04:4e42:400::144 |
| gov.uk | 1h | 2a04:4e42:800::144 |
| gov.uk | 1h | 2a04:4e42:200::144 |
| gov.uk | 1h | 2a04:4e42:c00::144 |
www A / CNAME
| Name | TTL | Value |
|---|---|---|
| www-gov-uk.map.fastly.net | 1m | 199.232.24.144 |
| www.gov.uk | 15m | www-cdn.production.govuk.service.gov.uk |
Nameservers NS
| Name | TTL | Value |
|---|---|---|
| gov.uk | 78464s | dns1.nic.uk |
| gov.uk | 78464s | nsa.nic.uk |
| gov.uk | 78464s | dns3.nic.uk |
| gov.uk | 78464s | dns2.nic.uk |
| gov.uk | 78464s | nsb.nic.uk |
| gov.uk | 78464s | nsc.nic.uk |
| gov.uk | 78464s | nsd.nic.uk |
| gov.uk | 78464s | dns4.nic.uk |
Text records TXT
| Name | TTL | Value |
|---|---|---|
| gov.uk | 8326s | _globalsign-domain-verification=a5p69EoJN9T_qv6CU2Y_FkAocR4FJpRN84165hHR25 |
| gov.uk | 8326s | v=spf1 -all |
| gov.uk | 8326s | #Timestamp: 1789080900 |
| gov.uk | 8326s | d1v9gv6rnax070.cloudfront.net |
| gov.uk | 8326s | security_contact=https://vulnerability-reporting.service.security.gov.uk |
Zone authority SOA
| Name | TTL | Value |
|---|---|---|
| gov.uk | 1h | dns1.nic.uk hostmaster.nominet.org.uk serial=1789159202 refresh=900 retry=300 expire=2419200 min=3600 |
Check this domain’s DMARC & SPF or BIMI.