public company · GB

BT

BT Group plc

British telecommunications and broadband provider (BT, BTinternet mail, EE); account and billing lures.

Primary official domain
bt.com
Reviewed official domains
4 (directory review; organization has not verified)
Directory source
DomainSpoof directory · Suggest a correction
Matching domains, 30 days
0
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
8
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF Lookup failed · checked 2026-10-18 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
btinternet
Label aliases
BTinternet · BT · British Telecom
Official domains
bt.com · btinternet.com · btplc.com · ee.co.uk (all)
Generated spellings
293 tracked · 0 observed somewhere · 293 not observed (all)

Official domains and email policies

Domains reviewed as belonging to BT. DMARC helps receivers check the From domain; lookalike domains remain possible. Published policies cannot confirm actual mail configuration or receiver behavior.

DomainRelationshipEvidenceDMARC policyPolicy sourceSPFReportingLast check
bt.com
primaryReviewed 2026-10-18
DomainSpoof directory (curated)rejectDirectLookup failedAggregate reports requested (rua)2026-10-18 22:58 UTC
Records and check details

Published records

DMARC (_dmarc.bt.com)
v=DMARC1; p=reject; fo=1; rua=mailto:…@emaildefense.proofpoint.com,mailto:…@bt.com; ruf=mailto:…@emaildefense.proofpoint.com,mailto:…@bt.com
SPF (bt.com)
Lookup failed
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing.

Interpretation

  • p=reject: receivers are asked to reject failing mail.
  • Relaxed DKIM alignment (default).
  • Relaxed SPF alignment (default).
  • A temporary DNS failure prevented complete SPF evaluation; the SPF result is unknown for this check.

Observations

  • SPF: bt.com: temporary DNS failure (servfail)

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.bt.com: ok, 1 DMARC record

Recent checks

  • 2026-10-18 22:58 UTC: DMARC reject; SPF lookup failed

Assessment posture-v2. DNS lookup failures leave the policy unknown.

btinternet.com
subsidiaryReviewed 2026-10-18
DomainSpoof directory (curated)rejectDirectLookup failedAggregate reports requested (rua)2026-10-18 22:58 UTC
Records and check details

Published records

DMARC (_dmarc.btinternet.com)
v=DMARC1; p=reject; sp=reject; pct=100; fo=1; rua=mailto:…@btinternet.com; ruf=mailto:…@btinternet.com;
SPF (btinternet.com)
v=spf1 include:_spf.btinternet.com include:bt.com ~all
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing.

Interpretation

  • p=reject: receivers are asked to reject failing mail.
  • Relaxed DKIM alignment (default).
  • Relaxed SPF alignment (default).
  • pct=100 is a legacy tag removed by RFC 9989; its effect is receiver-dependent.
  • A temporary DNS failure prevented complete SPF evaluation; the SPF result is unknown for this check.

Observations

  • SPF: include:bt.com: temporary DNS failure (servfail)

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.btinternet.com: ok, 1 DMARC record

Recent checks

  • 2026-10-18 22:58 UTC: DMARC reject; SPF lookup failed

Assessment posture-v2. DNS lookup failures leave the policy unknown.

btplc.com
subsidiaryReviewed 2026-10-18
DomainSpoof directory (curated)No DMARC record found—No SPF record found—2026-10-18 22:58 UTC
Records and check details

Published records

DMARC
Not returned
SPF (btplc.com)
Not returned
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing.

Interpretation

  • No DMARC record was found at this domain or any parent in the DNS tree walk. Receivers have no DMARC policy to apply for mail using this domain in the From address.
  • No SPF record is published at this domain.

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.btplc.com: nxdomain
  2. _dmarc.com: nxdomain

Recent checks

  • 2026-10-18 22:58 UTC: DMARC missing; SPF none

Assessment posture-v2. DNS lookup failures leave the policy unknown.

ee.co.uk
subsidiaryReviewed 2026-10-18
DomainSpoof directory (curated)rejectDirectLookup failedAggregate reports requested (rua)2026-10-18 22:58 UTC
Records and check details

Published records

DMARC (_dmarc.ee.co.uk)
v=DMARC1; p=reject; fo=1; rua=mailto:…@emaildefense.proofpoint.com,mailto:…@bt.com; ruf=mailto:…@emaildefense.proofpoint.com,mailto:…@bt.com
SPF (ee.co.uk)
v=spf1 include:_spf.server.lon.liveperson.net include:bt.com include:spf.dotmailer.com include:spf.dynect.net ~all
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing.

Interpretation

  • p=reject: receivers are asked to reject failing mail.
  • Relaxed DKIM alignment (default).
  • Relaxed SPF alignment (default).
  • A temporary DNS failure prevented complete SPF evaluation; the SPF result is unknown for this check.

Observations

  • Reporting: external destination bt.com does not publish report authorization; this affects reporting, not enforcement.
  • SPF: include:bt.com: temporary DNS failure (servfail)

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.ee.co.uk: ok, 1 DMARC record

Recent checks

  • 2026-10-18 22:58 UTC: DMARC reject; SPF lookup failed

Assessment posture-v2. DNS lookup failures leave the policy unknown.

“Not checked”: no check yet. “Lookup failed”: DNS result unknown. Report mailbox names are redacted.

Reports on official domains appear under “Official assets with reports” on the Reported matches tab.