{"engine":"checkup","target":"gmail.net","checked_at":"2026-10-30T22:18:26+00:00","cached":false,"duration_ms":3158,"error":null,"score":20,"counts":{"pass":3,"caution":1,"fail":5,"note":9,"skipped":0},"data":{"domain":"gmail.net","facets":{"registry":{"score":100,"counts":{"pass":2,"caution":0,"fail":0,"note":1,"skipped":0},"error":null,"checked_at":"2026-10-30T22:18:26+00:00","duration_ms":259},"dns":{"score":85,"counts":{"pass":0,"caution":0,"fail":1,"note":6,"skipped":0},"error":null,"checked_at":"2026-10-30T22:18:26+00:00","duration_ms":456},"mail":{"score":50,"counts":{"pass":0,"caution":1,"fail":3,"note":2,"skipped":0},"error":null,"checked_at":"2026-10-30T22:18:27+00:00","duration_ms":2227},"web":{"score":85,"counts":{"pass":0,"caution":0,"fail":1,"note":0,"skipped":0},"error":null,"checked_at":"2026-10-30T22:18:29+00:00","duration_ms":131},"reputation":{"score":100,"counts":{"pass":1,"caution":0,"fail":0,"note":0,"skipped":0},"error":null,"checked_at":"2026-10-30T22:18:25+00:00","duration_ms":515}},"summary":{"registered":true,"expires":"2030-05-15T18:11:48Z","registrar":"Network Solutions, LLC","nameservers":[],"mx":[],"spoofability":"exposed","https":null,"tls_days_left":null,"listed":0,"dns_provider":null,"mail_provider":null,"hosting":null,"headers_grade":null,"tls_score":null}},"findings":[{"level":"pass","code":"DOMAIN-EXPIRY-OK","title":"Registration valid for another 1292 days","detail":"2030-05-15T18:11:48Z","facet":"registry"},{"level":"pass","code":"DOMAIN-TRANSFER-LOCK","title":"Transfer lock is on","detail":"Protects against unauthorised transfers.","facet":"registry"},{"level":"note","code":"DOMAIN-REGISTRANT-REDACTED","title":"Registrant details are withheld","detail":"The registry does not publish registrant details","facet":"registry"},{"level":"fail","code":"DNS-NO-NS","title":"No NS records returned for the domain","detail":"Recursive resolvers could not obtain a nameserver set for the apex.","fix":"Check the delegation at the registrar and the zone on the authoritative servers.","facet":"dns"},{"level":"note","code":"DNS-NO-APEX-A","title":"No A record at the apex","detail":"The bare domain does not point at a web server.","facet":"dns"},{"level":"note","code":"DNS-NO-AAAA","title":"No IPv6 (AAAA) address for the apex","facet":"dns"},{"level":"note","code":"DNS-NO-WWW","title":"www does not resolve","detail":"Visitors typing www. in front of the domain will not reach a site.","facet":"dns"},{"level":"note","code":"DNS-NO-MX","title":"No MX records","detail":"Mail for this domain falls back to the A record, or the domain does not receive mail.","facet":"dns"},{"level":"note","code":"DNS-NO-CAA","title":"No CAA record","detail":"Any certificate authority may issue certificates for this domain.","facet":"dns"},{"level":"note","code":"DNSSEC-OFF","title":"DNSSEC is not enabled","facet":"dns"},{"level":"caution","code":"MX-MISSING","title":"No MX records","detail":"Senders will fall back to the A record of the domain. If the domain is not meant to receive mail, publish a null MX.","fix":"Add MX records for your mail provider, or \"MX 0 .\" if the domain never receives mail.","facet":"mail"},{"level":"fail","code":"SPF-MISSING","title":"No SPF record","detail":"Receivers cannot tell which servers may send mail for this domain, and DMARC cannot pass on SPF.","fix":"Publish a TXT record such as \"v=spf1 include:<your provider> -all\".","facet":"mail"},{"level":"note","code":"DKIM-NOT-DISCOVERED","title":"No DKIM key found under common selectors","detail":"Selectors are chosen by the sender, so a key may exist under a name we did not try. Check a real message header for the s= tag.","facet":"mail"},{"level":"fail","code":"DMARC-MISSING","title":"No DMARC record","detail":"Without DMARC, SPF and DKIM results are advisory and spoofed mail is not rejected. Google and Yahoo require DMARC from bulk senders.","fix":"Publish _dmarc.gmail.net TXT \"v=DMARC1; p=none; rua=mailto:dmarc@gmail.net\" and move to p=quarantine, then p=reject.","facet":"mail"},{"level":"note","code":"MTASTS-NONE","title":"No MTA-STS policy","detail":"Optional; protects inbound mail against TLS downgrade.","facet":"mail"},{"level":"fail","code":"SPOOF-EXPOSED","title":"Spoofing protection: none","detail":"Anyone can send mail that appears to come from this domain and most receivers will accept it.","fix":"Publish SPF with -all, sign with DKIM, then publish DMARC and enforce it.","facet":"mail"},{"level":"fail","code":"WEB-UNRESOLVABLE","title":"The host does not resolve to a public address","detail":"gmail.net does not resolve to any address","facet":"web"},{"level":"pass","code":"BLOCKLIST-CLEAN","title":"Not listed on 5 blocklists checked","facet":"reputation"}],"raw":[]}