{"domain":"korpo.pro","score":86,"spf":{"found":true,"record":"v=spf1 mx ip6:2001:41d0:305:2100::1:14bd -all","all_mechanism":"-all","includes":[],"redirects":null,"has_ptr":false,"dns_lookups":1,"issues":[{"record_type":"SPF","severity":"critical","message":"Multiple SPF records found.","detail":"Having more than one SPF record is invalid per RFC 7208. Merge them into a single record or use include/redirect mechanisms."}]},"dkim":{"found":true,"selectors_found":["default"],"selectors_checked":["default","google","selector1","selector2","mail","s1","s2","k1","k2","m1","m2","smtpapi","mandrill","sendgrid","mailgun","amazonses","ses","zoho","yandex"],"records":{"default":"v=DKIM1; h=sha256; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1FB7DXuZUZUV1tqdIcC09pqEsdu+VHUCHWRbDWqiTMQWAk/e/GlWmHBjNrpEI4FYXd+eVUFGJAso1EFksjItR7MT6XSj7VU2Ty5xTv4KG448NdiEFJ/l7SIWrSQiMfm0Fee4neg7k9ruiCGlg+5M7eeJzQTR5TlBKMeOYsm+IpTi2sPi2+yMpDBXwihrt8x2+D7UPI8Cg1J3OOz+hCpaRk0kUKoISh6XDPzl1+sAMiYjjdWHfXjNHXEHBUNYNaKaszvsI0EP4hZspQBww32OqNQo418rVBO5gV+y/d5xg1RP89s5Yrsecg0xRE87VSiziAPITJjvIfQzmJJCY9SvQIDAQAB"},"key_sizes":{"default":2352},"issues":[]},"dmarc":{"found":true,"record":"v=DMARC1; p=quarantine; rua=mailto:postmaster@korpo.pro; ruf=mailto:postmaster@korpo.pro; fo=1; adkim=r; aspf=r","policy":"quarantine","subdomain_policy":null,"percentage":null,"rua":["postmaster@korpo.pro"],"ruf":["postmaster@korpo.pro"],"issues":[{"record_type":"DMARC","severity":"critical","message":"Multiple DMARC records found — only one is allowed.","detail":"Having multiple DMARC TXT records is invalid per RFC 7489. Remove duplicates."},{"record_type":"DMARC","severity":"info","message":"DMARC policy is 'quarantine' — failing messages go to spam.","detail":"Good intermediate step. Consider upgrading to 'reject' for full protection."}]},"mtasts":{"found":false,"txt_record":null,"version":null,"id_value":null,"policy_fetched":false,"mode":null,"max_age":null,"mx_patterns":[],"policy_text":null,"issues":[{"record_type":"MTA-STS","severity":"warning","message":"No MTA-STS record found.","detail":"MTA-STS (RFC 8461) allows mail servers to discover your TLS policy, preventing downgrade attacks. Publish a TXT record at _mta-sts.<domain> with 'v=STSv1; id=<unique_id>;'."}]},"tlsrpt":{"found":true,"record":"v=TLSRPTv1; rua=mailto:postmaster@korpo.pro","version":"TLSRPTv1","rua":["mailto:postmaster@korpo.pro"],"issues":[]},"bimi":{"found":false,"record":null,"version":null,"location":null,"authority":null,"issues":[{"record_type":"BIMI","severity":"info","message":"No BIMI record found.","detail":"BIMI allows your brand logo to appear next to emails in supported clients. Publish a TXT record at default._bimi.<domain> with 'v=BIMI1; l=<logo_url>;'."}]},"issues":[{"record_type":"SPF","severity":"critical","message":"Multiple SPF records found.","detail":"Having more than one SPF record is invalid per RFC 7208. Merge them into a single record or use include/redirect mechanisms."},{"record_type":"DMARC","severity":"critical","message":"Multiple DMARC records found — only one is allowed.","detail":"Having multiple DMARC TXT records is invalid per RFC 7489. Remove duplicates."},{"record_type":"DMARC","severity":"info","message":"DMARC policy is 'quarantine' — failing messages go to spam.","detail":"Good intermediate step. Consider upgrading to 'reject' for full protection."},{"record_type":"MTA-STS","severity":"warning","message":"No MTA-STS record found.","detail":"MTA-STS (RFC 8461) allows mail servers to discover your TLS policy, preventing downgrade attacks. Publish a TXT record at _mta-sts.<domain> with 'v=STSv1; id=<unique_id>;'."},{"record_type":"BIMI","severity":"info","message":"No BIMI record found.","detail":"BIMI allows your brand logo to appear next to emails in supported clients. Publish a TXT record at default._bimi.<domain> with 'v=BIMI1; l=<logo_url>;'."}]}