{"domain":"yourdomain.com","score":80,"spf":{"found":true,"record":"v=spf1 include:dc-aa8e722993._spfm.yourdomain.com ~all","all_mechanism":"~all","includes":["dc-aa8e722993._spfm.yourdomain.com"],"redirects":null,"has_ptr":false,"dns_lookups":1,"issues":[{"record_type":"SPF","severity":"info","message":"SPF uses '~all' (softfail) — unauthorized sends will be marked but not rejected.","detail":"Softfail is a safe starting point. For stronger protection, consider '-all' (hardfail) once you're confident all legitimate senders are included."}]},"dkim":{"found":true,"selectors_found":["google"],"selectors_checked":["default","google","selector1","selector2","mail","s1","s2","k1","k2","m1","m2","smtpapi","mandrill","sendgrid","mailgun","amazonses","ses","zoho","yandex"],"records":{"google":"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojraos0YsQgFrG4ulael/otS43FNoU6wwc7pXv8yAhHSZs0Q5Y3j/jRuogeOFXkWMYs3Clx3Z9KGUQZzra8m1gLM14+7buF8hNHiAcp7YYntEGecBEYJgwTcg6YDHuNCLTFQE8VE4y8dQyn7Re3Ontxcmcy5nftRo7DyuJ5FOQIMgfhdYCF7Dsk2mPZ/3N3Q5LlsjCyNd5T3Tgsx6AGnIdta22TeaYqPgVjSG55WXC7fLu3DwdOAtQulrOVDGpt4NAwE2cJ0Cx6XZkTLMAiwXg3OjC+saroa2OrmQzIEhbayOrkvKdHRMh+0O2Jg1be4jmEEPdyuSj3NgHtdNfi2YQIDAQAB"},"key_sizes":{"google":2352},"issues":[]},"dmarc":{"found":true,"record":"v=DMARC1; p=none; rua=mailto:mailto:prashant@yourdomain.com","policy":"none","subdomain_policy":null,"percentage":null,"rua":["prashant@yourdomain.com"],"ruf":[],"issues":[{"record_type":"DMARC","severity":"warning","message":"DMARC policy is 'none' — monitoring only, no enforcement.","detail":"A 'none' policy is a good starting point to monitor your email flows, but doesn't protect against spoofing. Move to 'quarantine' and then 'reject' once you've verified legitimate senders are passing SPF/DKIM."}]},"mtasts":{"found":false,"txt_record":null,"version":null,"id_value":null,"policy_fetched":false,"mode":null,"max_age":null,"mx_patterns":[],"policy_text":null,"issues":[{"record_type":"MTA-STS","severity":"warning","message":"No MTA-STS record found.","detail":"MTA-STS (RFC 8461) allows mail servers to discover your TLS policy, preventing downgrade attacks. Publish a TXT record at _mta-sts.<domain> with 'v=STSv1; id=<unique_id>;'."}]},"tlsrpt":{"found":false,"record":null,"version":null,"rua":[],"issues":[{"record_type":"TLS-RPT","severity":"info","message":"No TLS-RPT record found.","detail":"TLS-RPT (RFC 8460) allows receivers to send you reports about TLS connection failures. Publish a TXT record at _smtp._tls.<domain> with 'v=TLSRPTv1; rua=mailto:tls-reports@<domain>;'."}]},"bimi":{"found":false,"record":null,"version":null,"location":null,"authority":null,"issues":[{"record_type":"BIMI","severity":"info","message":"No BIMI record found.","detail":"BIMI allows your brand logo to appear next to emails in supported clients. Publish a TXT record at default._bimi.<domain> with 'v=BIMI1; l=<logo_url>;'."}]},"issues":[{"record_type":"SPF","severity":"info","message":"SPF uses '~all' (softfail) — unauthorized sends will be marked but not rejected.","detail":"Softfail is a safe starting point. For stronger protection, consider '-all' (hardfail) once you're confident all legitimate senders are included."},{"record_type":"DMARC","severity":"warning","message":"DMARC policy is 'none' — monitoring only, no enforcement.","detail":"A 'none' policy is a good starting point to monitor your email flows, but doesn't protect against spoofing. Move to 'quarantine' and then 'reject' once you've verified legitimate senders are passing SPF/DKIM."},{"record_type":"MTA-STS","severity":"warning","message":"No MTA-STS record found.","detail":"MTA-STS (RFC 8461) allows mail servers to discover your TLS policy, preventing downgrade attacks. Publish a TXT record at _mta-sts.<domain> with 'v=STSv1; id=<unique_id>;'."},{"record_type":"TLS-RPT","severity":"info","message":"No TLS-RPT record found.","detail":"TLS-RPT (RFC 8460) allows receivers to send you reports about TLS connection failures. Publish a TXT record at _smtp._tls.<domain> with 'v=TLSRPTv1; rua=mailto:tls-reports@<domain>;'."},{"record_type":"BIMI","severity":"info","message":"No BIMI record found.","detail":"BIMI allows your brand logo to appear next to emails in supported clients. Publish a TXT record at default._bimi.<domain> with 'v=BIMI1; l=<logo_url>;'."}]}