{"engine":"mail","target":"example.net","checked_at":"2026-10-29T19:50:02+00:00","cached":false,"duration_ms":202,"error":null,"score":80,"counts":{"pass":4,"caution":4,"fail":0,"note":3,"skipped":0},"data":{"domain":"example.net","null_mx":true,"mx":[],"spf":{"records":["v=spf1 -all"],"record":"v=spf1 -all","lookups":0,"issues":[],"shape":{"all":"-","redirect":null,"mechanisms":[],"lookup_terms":0,"uses_ptr":false}},"dkim":{"selectors_tried":54,"found":[{"selector":"google","record":"v=DKIM1; p=","valid":true,"tags":{"v":"DKIM1","p":""},"key_type":"rsa","key_bits":null,"testing":false,"revoked":true,"errors":[]},{"selector":"20230601","record":"v=DKIM1; p=","valid":true,"tags":{"v":"DKIM1","p":""},"key_type":"rsa","key_bits":null,"testing":false,"revoked":true,"errors":[]},{"selector":"20221208","record":"v=DKIM1; p=","valid":true,"tags":{"v":"DKIM1","p":""},"key_type":"rsa","key_bits":null,"testing":false,"revoked":true,"errors":[]},{"selector":"20210112","record":"v=DKIM1; p=","valid":true,"tags":{"v":"DKIM1","p":""},"key_type":"rsa","key_bits":null,"testing":false,"revoked":true,"errors":[]}]},"dmarc":{"records":["v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s"],"parsed":{"valid":true,"tags":{"v":"DMARC1","p":"reject","sp":"reject","adkim":"s","aspf":"s"},"policy":"reject","subdomain_policy":"reject","pct":100,"rua":[],"ruf":[],"adkim":"s","aspf":"s","errors":[]},"external_reports":[]},"mta_sts":{"record":null,"policy":null,"policy_url":"https:\/\/mta-sts.example.net\/.well-known\/mta-sts.txt","error":null},"tls_rpt":null,"bimi":null,"spoofability":"protected","mail_provider":null},"findings":[{"level":"note","code":"MX-NULL","title":"Null MX: this domain declares that it does not receive mail","detail":"RFC 7505 null MX (\". 0\").","facet":"mail"},{"level":"pass","code":"SPF-LOOKUPS-OK","title":"SPF uses 0 of 10 permitted DNS lookups","facet":"mail"},{"level":"pass","code":"SPF-HARDFAIL-ALL","title":"SPF ends with -all","facet":"mail"},{"level":"caution","code":"DKIM-REVOKED","title":"DKIM selector google is revoked (empty key)","facet":"mail"},{"level":"caution","code":"DKIM-REVOKED","title":"DKIM selector 20230601 is revoked (empty key)","facet":"mail"},{"level":"caution","code":"DKIM-REVOKED","title":"DKIM selector 20221208 is revoked (empty key)","facet":"mail"},{"level":"caution","code":"DKIM-REVOKED","title":"DKIM selector 20210112 is revoked (empty key)","facet":"mail"},{"level":"pass","code":"DMARC-REJECT","title":"DMARC policy is p=reject","detail":"Spoofed mail that fails authentication is rejected.","facet":"mail"},{"level":"note","code":"DMARC-NO-RUA","title":"No aggregate report address (rua)","detail":"You receive no visibility of who sends as your domain.","facet":"mail"},{"level":"note","code":"MTASTS-NONE","title":"No MTA-STS policy","detail":"Optional; protects inbound mail against TLS downgrade.","facet":"mail"},{"level":"pass","code":"SPOOF-PROTECTED","title":"Spoofing protection: enforced","detail":"SPF and DMARC together reject or quarantine forged mail.","facet":"mail"}],"raw":[]}