{
  "domain": "gmail.com",
  "status": "NOERROR",
  "grade": "B",
  "counts": {
    "ok": 4,
    "warn": 1,
    "fail": 0,
    "info": 2
  },
  "checks": [
    {
      "check": "MX",
      "status": "ok",
      "text": "Gmail: gmail-smtp-in.l.google.com, alt1.gmail-smtp-in.l.google.com and 3 more"
    },
    {
      "check": "SPF",
      "status": "ok",
      "text": "ends in ~all via redirect=_spf.google.com; 1 of 10 DNS lookups"
    },
    {
      "check": "DMARC",
      "status": "warn",
      "text": "p=none: monitoring only, so mail that fails is still delivered; reports go to mailauth-reports@google.com",
      "fix": "once the reports show your own mail passes, move to p=quarantine, then p=reject"
    },
    {
      "check": "DKIM",
      "status": "info",
      "text": "no key at the common selectors (google, selector1, selector2, default, k1, s1). Selectors can't be listed, so this doesn't mean DKIM is off: name yours with --dkim <selector> (?dkim= in a URL), the s= value in a message's DKIM-Signature header"
    },
    {
      "check": "MTA-STS",
      "status": "ok",
      "text": "mode enforce, max_age 1 day, and every MX host is covered"
    },
    {
      "check": "TLS-RPT",
      "status": "ok",
      "text": "reports go to sts-reports@google.com"
    },
    {
      "check": "BIMI",
      "status": "info",
      "text": "no logo (optional: some inboxes show a brand logo next to your mail)"
    }
  ],
  "selector": null,
  "nullMx": false,
  "mx": {
    "records": [
      {
        "priority": 5,
        "host": "gmail-smtp-in.l.google.com"
      },
      {
        "priority": 10,
        "host": "alt1.gmail-smtp-in.l.google.com"
      },
      {
        "priority": 20,
        "host": "alt2.gmail-smtp-in.l.google.com"
      },
      {
        "priority": 30,
        "host": "alt3.gmail-smtp-in.l.google.com"
      },
      {
        "priority": 40,
        "host": "alt4.gmail-smtp-in.l.google.com"
      }
    ],
    "providers": [
      "Gmail"
    ],
    "mixedNull": false
  },
  "spf": {
    "records": 1,
    "record": "v=spf1 redirect=_spf.google.com",
    "all": "~all",
    "redirect": "_spf.google.com",
    "redirectMacro": false,
    "lookups": 1,
    "overLimit": false,
    "counted": true,
    "includes": [],
    "errors": [],
    "unresolved": [],
    "passAll": [],
    "ptr": false,
    "macros": false,
    "onlyFail": false
  },
  "dmarc": {
    "record": "v=DMARC1; p=none; sp=quarantine; rua=mailto:mailauth-reports@google.com",
    "policy": "none",
    "subdomainPolicy": "quarantine",
    "nonexistentPolicy": null,
    "pct": 100,
    "testing": false,
    "rua": [
      "mailauth-reports@google.com"
    ],
    "ruf": [],
    "adkim": "relaxed",
    "aspf": "relaxed",
    "records": 1,
    "from": "gmail.com",
    "inherited": false
  },
  "dkim": {
    "selectors": [
      "google",
      "selector1",
      "selector2",
      "default",
      "k1",
      "s1"
    ],
    "keys": [],
    "unanswered": []
  },
  "mtaSts": {
    "record": "v=STSv1; id=20190429T010101;",
    "records": 1,
    "id": "20190429T010101",
    "policy": {
      "url": "https://mta-sts.gmail.com/.well-known/mta-sts.txt",
      "version": "STSv1",
      "mode": "enforce",
      "mx": [
        "smtp.google.com",
        "gmail-smtp-in.l.google.com",
        "*.gmail-smtp-in.l.google.com"
      ],
      "maxAge": 86400,
      "errors": [],
      "contentType": null
    }
  },
  "tlsRpt": {
    "record": "v=TLSRPTv1;rua=mailto:sts-reports@google.com",
    "records": 1,
    "rua": [
      "sts-reports@google.com"
    ]
  },
  "bimi": null,
  "unread": {},
  "source": "cloudflare-dns",
  "subrequests": 14
}