{
  "success": true,
  "data": {
    "domain": "google.com",
    "overall": "pass",
    "checks": [
      {
        "key": "mx",
        "name": "MX Records",
        "status": "pass",
        "value": "10 smtp.google.com",
        "records": [
          {
            "priority": 10,
            "host": "smtp.google.com"
          }
        ],
        "explanation": "1 mail server configured. The domain can receive email."
      },
      {
        "key": "spf",
        "name": "SPF",
        "status": "pass",
        "value": "v=spf1 include:_spf.google.com ~all",
        "explanation": "SPF ends with ~all (soft fail): mail from unauthorized servers is accepted but flagged. A solid, common policy."
      },
      {
        "key": "dmarc",
        "name": "DMARC",
        "status": "pass",
        "value": "v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com",
        "policy": "reject",
        "explanation": "DMARC policy is p=reject: spoofed mail failing SPF/DKIM alignment is rejected outright. The strongest setting."
      }
    ],
    "checked_at": "2026-06-12T13:55:58.670Z"
  }
}