{"domain":"google.com","results":{"spf":{"domain":"google.com","host":"google.com","records":["v=spf1 include:_spf.google.com ~all"],"found":true},"dmarc":{"domain":"google.com","host":"_dmarc.google.com","records":["v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com"],"found":true},"mx":{"domain":"google.com","records":[{"priority":10,"exchange":"smtp.google.com"}],"found":true,"note":"DNS only; does not test mail delivery."},"mta_sts":{"domain":"google.com","host":"_mta-sts.google.com","records":["v=STSv1; id=20210803T010101;"],"found":true,"policy_fetched":false,"policy_error":"HTTPS policy request failed"},"tls_rpt":{"domain":"google.com","host":"_smtp._tls.google.com","records":["v=TLSRPTv1;rua=mailto:sts-reports@google.com"],"found":true},"bimi":{"domain":"google.com","host":"default._bimi.google.com","records":[],"found":false,"note":"Does not validate image, certificate, or mailbox-provider display requirements."}},"findings":[],"notes":["Informational DNS inspection; not a security or deliverability certification.","DKIM needs a known selector.","MTA-STS, TLS-RPT and BIMI are optional in many environments."]}