Your browser asks Google Public DNS directly for the domain’s public records. Nothing is sent to this site and nothing is stored.
What the tool checks
- MX: which service receives your email (Microsoft 365, Google Workspace, or another).
- SPF: exactly one record, ending in
~allor-all, under the limit of 10 DNS lookups. - DKIM: the signature, at the most common selector names (selector1, selector2, google, default, k1, and a few others).
- DMARC: presence, policy (
none,quarantine, orreject), and reporting address.
The tool reads public DNS records only. It cannot see your messages, and a DKIM “not found” is not proof that none exists. For what to do next, see the SPF, DKIM, and DMARC guide and the Microsoft 365 email guide.