everything is fine, except it doesnt mention if the domain is valid or not, but it work even when domain is invalid, and invalid domain wont have any spf info.
this perticipant used backend to handle spf instead of public api dirrectly. and completed extra task.