theguardian.com email security: SPF, DKIM & DMARC

Is theguardian.com spoofable? See theguardian.com's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.

Last updated: June 3, 2026

95A
This domain is protected against spoofing

SPF

OK
v=spf1 include:_spf.google.com include:spf_c.oraclecloud.com include:_spf.salesforce.com include:_spf1.theguardian.com ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169.224.0/20 ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20 ip4:54.240.64.0/18 ip4:76.223.128.0/19 ip4:216.221.160.0/19 ip4:206.55.144.0/20 ip4:24.110.64.0/18 -all

DKIM

OK
Selectors: google, cm

DMARC

OK
v=DMARC1;p=reject;rua=mailto:dmarcreporting@theguardian.com

MX

OK
aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.com

MTA-STS

Warning
v=STSv1; id=20220214T1400
Read the guide

Recommendations

  1. 1Switch your MTA-STS policy from testing to enforce mode

    In testing mode, MTA-STS only reports TLS failures without blocking delivery. Switching to enforce mode ensures that emails are only delivered over encrypted connections, providing real protection against interception.

Run a live analysis

The results above are updated daily. For an instant check of theguardian.com, run a live analysis.

Analyze theguardian.com live

Frequently asked questions about theguardian.com

Is theguardian.com spoofable?

No. theguardian.com is protected against email spoofing with a robust configuration. Email security score: 95/100 (grade A).

Does theguardian.com have an SPF record?

Yes, theguardian.com publishes an SPF record (-all qualifier).

What is theguardian.com's DMARC record?

theguardian.com publishes a DMARC record (_dmarc.theguardian.com) with a p=reject policy.

Does theguardian.com use DKIM?

Yes, DKIM signatures were detected for theguardian.com.

Want to test another domain? Run a free email spoofing test.

Guides to understand these results

Check other domains