{"schemaVersion":1,"domain":"google.com","checkedAt":"2026-10-20T14:20:54.104Z","score":73,"grade":"C","categories":[{"check":"spf","labelEn":"Who may send","score":20,"max":30,"status":"warn","findings":[{"id":"spf-softfail","check":"spf","severity":"warn","titleEn":"SPF uses softfail (~all)","hintEn":"~all means suspicious, and many receivers still accept the message. After every legitimate sender is listed, change the qualifier to -all."}]},{"check":"dkim","labelEn":"Signature key","score":8,"max":25,"status":"unknown","findings":[{"id":"dkim-not-found","check":"dkim","severity":"warn","titleEn":"No DKIM key on common selectors","hintEn":"DNS cannot list every selector. None of the 19 common names (google, selector1, selector2, k1, s1, fm1, and others) published a key. Custom or date-based selectors are not queried."}]},{"check":"dmarc","labelEn":"Failure policy","score":30,"max":30,"status":"pass","findings":[{"id":"dmarc-reject","check":"dmarc","severity":"pass","titleEn":"DMARC policy is reject","hintEn":"Mail that fails alignment should be rejected. Before you change sending services, add them to SPF and sign with DKIM."}]},{"check":"mx","labelEn":"Where bounces go","score":15,"max":15,"status":"pass","findings":[{"id":"mx-present","check":"mx","severity":"pass","titleEn":"MX records look usable","hintEn":"The lowest preference is smtp.google.com (10). Confirm that host actually accepts mail."}]}],"findings":[{"id":"spf-softfail","check":"spf","severity":"warn","titleEn":"SPF uses softfail (~all)","hintEn":"~all means suspicious, and many receivers still accept the message. After every legitimate sender is listed, change the qualifier to -all."},{"id":"dkim-not-found","check":"dkim","severity":"warn","titleEn":"No DKIM key on common selectors","hintEn":"DNS cannot list every selector. None of the 19 common names (google, selector1, selector2, k1, s1, fm1, and others) published a key. Custom or date-based selectors are not queried."},{"id":"dmarc-reject","check":"dmarc","severity":"pass","titleEn":"DMARC policy is reject","hintEn":"Mail that fails alignment should be rejected. Before you change sending services, add them to SPF and sign with DKIM."},{"id":"mx-present","check":"mx","severity":"pass","titleEn":"MX records look usable","hintEn":"The lowest preference is smtp.google.com (10). Confirm that host actually accepts mail."}],"records":{"spf":["v=spf1 include:_spf.google.com ~all"],"dmarc":["v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com"],"mx":[{"priority":10,"exchange":"smtp.google.com"}],"dkim":[],"dkimSelectorsChecked":["google","selector1","selector2","k1","k2","k3","s1","s2","default","dkim","mail","cm","protonmail","zoho","mandrill","pic","fm1","fm2","fm3"]},"limitations":[{"en":"DKIM is limited to common selectors. A miss does not prove the domain never signs."},{"en":"SPF include chains are not expanded. The 10-lookup warning counts mechanisms on this record only."},{"en":"Public DNS reads only. No mail is sent, no mailbox is opened, and no registrar is contacted."}],"dnsProvider":"node"}