{
  "domain": "servicem8.com",
  "mx": [
    {
      "priority": 10,
      "host": "aspmx.l.google.com"
    },
    {
      "priority": 20,
      "host": "alt1.aspmx.l.google.com"
    },
    {
      "priority": 30,
      "host": "alt2.aspmx.l.google.com"
    },
    {
      "priority": 30,
      "host": "aspmx3.googlemail.com"
    }
  ],
  "mx_source": "https://cloudflare-dns.com/dns-query?name=servicem8.com&type=MX",
  "spf": "v=spf1 include:spf.mtasv.net include:mail.zendesk.com include:amazonses.com  include:_spf.google.com -all",
  "spf_source": "https://cloudflare-dns.com/dns-query?name=servicem8.com&type=TXT",
  "spf_includes": [
    "spf.mtasv.net",
    "mail.zendesk.com",
    "amazonses.com",
    "_spf.google.com"
  ],
  "authorised_senders": [
    {
      "id": "google_workspace",
      "name": "Google Workspace",
      "note": "Mail is Google Workspace."
    },
    {
      "id": "zendesk_email",
      "name": "Zendesk",
      "note": "Zendesk is authorised to send as this domain."
    }
  ],
  "dmarc": "v=DMARC1; p=reject; pct=100; rua=mailto:re+jtud25kobdm@dmarc.postmarkapp.com; sp=reject; aspf=r;",
  "dmarc_source": "https://cloudflare-dns.com/dns-query?name=_dmarc.servicem8.com&type=TXT",
  "verifications": [
    {
      "id": "verify.apple",
      "name": "Apple",
      "value": "apple-domain-verification=jnEaBlly82f5bAfB"
    },
    {
      "id": "verify.facebook",
      "name": "Meta",
      "value": "facebook-domain-verification=omaxo53ijuire036uswyzrduofrd2g"
    },
    {
      "id": "verify.google",
      "name": "Google",
      "value": "google-site-verification=NO7tfi0jreqC3DBwHzzSHwja9bE5wDD3nMKVtjErMa4"
    }
  ],
  "readings": [
    "Mail is Google Workspace.",
    "SPF authorises Google Workspace, Zendesk to send as this domain.",
    "DMARC is enforced at p=reject.",
    "Domain verification records show Apple, Meta, Google in use."
  ],
  "inbound_provider": {
    "id": "google_workspace",
    "name": "Google Workspace",
    "note": "Mail is Google Workspace."
  },
  "dmarc_policy": "reject",
  "dmarc_rua": "mailto:re+jtud25kobdm@dmarc.postmarkapp.com",
  "provenance": {
    "retrieved_at": "2026-08-20T12:04:17.686Z",
    "sources": [
      {
        "what": "MX records",
        "url": "https://cloudflare-dns.com/dns-query?name=servicem8.com&type=MX"
      },
      {
        "what": "TXT records, for SPF",
        "url": "https://cloudflare-dns.com/dns-query?name=servicem8.com&type=TXT"
      },
      {
        "what": "DMARC record",
        "url": "https://cloudflare-dns.com/dns-query?name=_dmarc.servicem8.com&type=TXT"
      }
    ],
    "limits": [
      "DNS says who is authorised to send, not who does. A domain can authorise a provider it stopped using two years ago.",
      "DKIM is not checked here: the selector name is not discoverable from DNS alone, so it would have to be guessed, and a guess that misses looks identical to a domain with no DKIM."
    ]
  }
}