No CAA records were returned at this registrable domain name. With no CAA policy, any public certificate authority (CA) may issue TLS certificates for names under this zone unless a parent publishes CAA; add issue / issuewild / iodef records to restrict issuance.

No DMARC TXT record was returned (expected at `_dmarc.<domain>` with `v=DMARC1`). Without DMARC you cannot publish receiver policy or standard aggregate failure reports (RUA).

No SPF TXT record was returned (`v=spf1` / `spf2.0/`). SPF tells receivers which hosts may send mail for this domain; without it, aligned DMARC and spoofing defenses are weaker.