theguardian.com email security: SPF, DKIM & DMARC
Is theguardian.com spoofable? See theguardian.com's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.
Last updated: June 3, 2026
SPF
OKv=spf1 include:_spf.google.com include:spf_c.oraclecloud.com include:_spf.salesforce.com include:_spf1.theguardian.com ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169.224.0/20 ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20 ip4:54.240.64.0/18 ip4:76.223.128.0/19 ip4:216.221.160.0/19 ip4:206.55.144.0/20 ip4:24.110.64.0/18 -allDKIM
OKSelectors: google, cmDMARC
OKv=DMARC1;p=reject;rua=mailto:dmarcreporting@theguardian.comMX
OKaspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.comRecommendations
1Switch your MTA-STS policy from testing to enforce mode
In testing mode, MTA-STS only reports TLS failures without blocking delivery. Switching to enforce mode ensures that emails are only delivered over encrypted connections, providing real protection against interception.
Run a live analysis
The results above are updated daily. For an instant check of theguardian.com, run a live analysis.
Analyze theguardian.com liveFrequently asked questions about theguardian.com
Is theguardian.com spoofable?
No. theguardian.com is protected against email spoofing with a robust configuration. Email security score: 95/100 (grade A).
Does theguardian.com have an SPF record?
Yes, theguardian.com publishes an SPF record (-all qualifier).
What is theguardian.com's DMARC record?
theguardian.com publishes a DMARC record (_dmarc.theguardian.com) with a p=reject policy.
Does theguardian.com use DKIM?
Yes, DKIM signatures were detected for theguardian.com.
Want to test another domain? Run a free email spoofing test.
Guides to understand these results
SPF Guide
Understand how SPF defines which servers are authorized to send emails for a domain.
DKIM Guide
Discover how DKIM cryptographically signs your emails to guarantee their authenticity.
DMARC Guide
Learn how DMARC orchestrates SPF and DKIM to protect your domain.
MTA-STS Guide
Learn how MTA-STS enforces TLS encryption to protect your emails in transit.
SPF vs DKIM vs DMARC
Compare the three protocols and understand how they work together.