{"engine":"mail","target":"google.com","checked_at":"2026-10-28T18:01:57+00:00","cached":false,"duration_ms":1199,"error":null,"score":80,"counts":{"pass":7,"caution":4,"fail":0,"note":1,"skipped":0},"data":{"domain":"google.com","null_mx":false,"mx":[{"host":"smtp.google.com","preference":10,"ttl":130,"ips":["192.178.223.27","172.217.76.27","192.178.223.26","2a00:1450:4009:c0f:0:0:0:1a","2a00:1450:4009:c0f:0:0:0:1b","2a00:1450:4009:c19:0:0:0:1a"],"ptr":[{"ip":"192.178.223.27","name":"yulhrs-in-f27.1e100.net","forward_confirmed":true},{"ip":"172.217.76.27","name":"yulhrp-in-f27.1e100.net","forward_confirmed":true}],"smtp":{"host":"smtp.google.com","ip":"172.217.76.27","port":25,"warnings":[],"ptr":{"name":"yulhrp-in-f27.1e100.net","forward_confirmed":true},"connect_ms":5,"banner":{"code":220,"text":"220 mx.google.com ESMTP ffacd0b85a97d-48e3ed0cc72si27189071f8f.332 - gsmtp","ms":12},"ehlo":{"code":250,"ms":119,"extensions":["SIZE","8BITMIME","STARTTLS","ENHANCEDSTATUSCODES","PIPELINING","CHUNKING","SMTPUTF8"],"size":"157286400"},"starttls":{"offered":true,"ok":true,"ms":13,"protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384"},"cert":{"subject":"mx.google.com","issuer":"Google Trust Services","not_before":"Sep 28 18:40:13 2026 GMT","not_after":"Dec 21 18:40:12 2026 GMT","sans":["mx.google.com","smtp.google.com","aspmx.l.google.com","alt1.aspmx.l.google.com","alt2.aspmx.l.google.com","alt3.aspmx.l.google.com","alt4.aspmx.l.google.com","gmail-smtp-in.l.google.com","alt1.gmail-smtp-in.l.google.com","alt2.gmail-smtp-in.l.google.com","alt3.gmail-smtp-in.l.google.com","alt4.gmail-smtp-in.l.google.com","gmr-smtp-in.l.google.com","alt1.gmr-smtp-in.l.google.com","alt2.gmr-smtp-in.l.google.com","alt3.gmr-smtp-in.l.google.com","alt4.gmr-smtp-in.l.google.com","mx1.smtp.goog","mx2.smtp.goog","mx3.smtp.goog","mx4.smtp.goog","aspmx2.googlemail.com","aspmx3.googlemail.com","aspmx4.googlemail.com","aspmx5.googlemail.com","gmr-mx.google.com"],"matches_host":true,"chain_ok":true},"transaction_ms":537}}],"spf":{"records":["v=spf1 include:_spf.google.com ~all"],"record":"v=spf1 include:_spf.google.com ~all","lookups":1,"issues":[],"shape":{"all":"~","redirect":null,"mechanisms":["+include:_spf.google.com"],"lookup_terms":1,"uses_ptr":false}},"dkim":{"selectors_tried":54,"found":[{"selector":"20230601","record":"v=DKIM1; k=rsa; p=","valid":true,"tags":{"v":"DKIM1","k":"rsa","p":""},"key_type":"rsa","key_bits":null,"testing":false,"revoked":true,"errors":[]},{"selector":"20221208","record":"v=DKIM1; k=rsa; p=","valid":true,"tags":{"v":"DKIM1","k":"rsa","p":""},"key_type":"rsa","key_bits":null,"testing":false,"revoked":true,"errors":[]},{"selector":"20210112","record":"v=DKIM1; k=rsa; p=","valid":true,"tags":{"v":"DKIM1","k":"rsa","p":""},"key_type":"rsa","key_bits":null,"testing":false,"revoked":true,"errors":[]},{"selector":"20161025","record":"k=rsa; p=","valid":true,"tags":{"k":"rsa","p":""},"key_type":"rsa","key_bits":null,"testing":false,"revoked":true,"errors":[]}]},"dmarc":{"records":["v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com"],"parsed":{"valid":true,"tags":{"v":"DMARC1","p":"reject","rua":"mailto:mailauth-reports@google.com"},"policy":"reject","subdomain_policy":null,"pct":100,"rua":["mailauth-reports@google.com"],"ruf":[],"adkim":"r","aspf":"r","errors":[]},"external_reports":[]},"mta_sts":{"record":"v=STSv1; id=20210803T010101;","policy":{"version":"STSv1","mode":"enforce","mx":["smtp.google.com","aspmx.l.google.com","*.aspmx.l.google.com"],"max_age":86400,"raw":"version: STSv1\r\nmode: enforce\r\nmx: smtp.google.com\r\nmx: aspmx.l.google.com\r\nmx: *.aspmx.l.google.com\r\nmax_age: 86400\r\n"},"policy_url":"https:\/\/mta-sts.google.com\/.well-known\/mta-sts.txt","error":null},"tls_rpt":"v=TLSRPTv1;rua=mailto:sts-reports@google.com","bimi":null,"spoofability":"protected","mail_provider":"Google Workspace"},"findings":[{"level":"note","code":"MX-SINGLE","title":"Only one MX host","detail":"A second MX gives senders a fallback during maintenance.","facet":"mail"},{"level":"pass","code":"SMTP-STARTTLS-OK","title":"smtp.google.com supports STARTTLS (TLSv1.3)","detail":"TLS_AES_256_GCM_SHA384","facet":"mail"},{"level":"pass","code":"SPF-LOOKUPS-OK","title":"SPF uses 1 of 10 permitted DNS lookups","facet":"mail"},{"level":"pass","code":"SPF-SOFTFAIL-ALL","title":"SPF ends with ~all (soft fail)","detail":"Fine with DMARC enforcing; -all is stricter.","facet":"mail"},{"level":"caution","code":"DKIM-REVOKED","title":"DKIM selector 20230601 is revoked (empty key)","facet":"mail"},{"level":"caution","code":"DKIM-REVOKED","title":"DKIM selector 20221208 is revoked (empty key)","facet":"mail"},{"level":"caution","code":"DKIM-REVOKED","title":"DKIM selector 20210112 is revoked (empty key)","facet":"mail"},{"level":"caution","code":"DKIM-REVOKED","title":"DKIM selector 20161025 is revoked (empty key)","facet":"mail"},{"level":"pass","code":"DMARC-REJECT","title":"DMARC policy is p=reject","detail":"Spoofed mail that fails authentication is rejected.","facet":"mail"},{"level":"pass","code":"MTASTS-ENFORCE","title":"MTA-STS is in enforce mode","facet":"mail"},{"level":"pass","code":"TLSRPT-OK","title":"TLS reporting (TLS-RPT) is enabled","detail":"v=TLSRPTv1;rua=mailto:sts-reports@google.com","facet":"mail"},{"level":"pass","code":"SPOOF-PROTECTED","title":"Spoofing protection: enforced","detail":"SPF and DMARC together reject or quarantine forged mail.","facet":"mail"}],"raw":[]}