bt.com

Checked 5/14/2026, 10:51:09 PM · 1467ms

Functional: testing mode. Move to enforce when ready.

DNS record

present

looked up: _mta-sts.bt.com

v=STSv1; id=20250710

version: STSv1
id: 20250710

Policy file

HTTP 200

https://mta-sts.bt.com/.well-known/mta-sts.txt

version: STSv1
mode: testing
mx: btgroupcloud-mail-onmicrosoft-com.mail.protection.outlook.com
max_age: 86400

version: STSv1
mode: testing
max_age: 86400s

Allowed MX patterns (1)

btgroupcloud-mail-onmicrosoft-com.mail.protection.outlook.com

TLS-RPT (failure reporting)

missing

No TLS-RPT record found. Without it, you do not learn when receivers fail to enforce STS against your domain.

Recommendations

Policy mode is "testing". Move to enforce once you have reviewed TLS-RPT reports for failures.
Publish a TLS-RPT record at _smtp._tls.bt.com: "v=TLSRPTv1; rua=mailto:[email protected]" so receivers can report STS / TLS failures back to you.

Auto-fix: copy this MTA-STS record

for bt.com

TLS-RPT lets receivers send you JSON reports when STS / DANE fails. Point the rua at a mailbox you actually monitor.

Type: TXT
Name: _smtp._tls
Value: v=TLSRPTv1; rua=mailto:[email protected]
TTL: Auto

DNS → Records → Add record. Pick the type, paste Name and Content as shown below.
Set Proxy status to "DNS only" (grey cloud) for TXT / CAA records. TTL: Auto.

AI-assisted remediation

Want a tailored fix plan in plain English?

Wiredepth Pro sends this report to our AI engine and streams back a 30-day rollout plan tailored to bt.com, with provider-specific tips when we can infer them from the data. 10 playbooks per month on Pro, 100 on MSP.

ProSee Pro plans→

Check another domain

Or share this URL with the team that owns the records.