Rides on Domain Health
A blacklist check never runs alone — it’s a best-effort pass inside every fresh Domain Health snapshot. So the hit count lands right next to SPF / DKIM / DMARC posture, sharing the same 24-hour cache. No separate endpoint, no second console screen.