Check a domain

Type any domain. We read what its DNS says about DMARC, SPF, DKIM, TLS-RPT, MTA-STS and BIMI, and tell you what we could not establish as well as what we could. No account, and nothing is stored.

Domain DKIM selector (optional)

A DKIM selector cannot be looked up: DNS has no record that lists them, because the selector travels in each message's own header. Find it in the s= tag of a DKIM-Signature header on a message this domain sent.

Generate a DMARC record

One record, at p=none with reporting. It changes no delivery, so publishing it cannot break your mail, and it starts the reports that make the next step knowable.

Domain Send reports to

Period

What we can and cannot tell you

Domain	State	Messages	Reports	What that means

DKIM signing

Domain	Selector	Messages	Share of readable mail	Passed	Last seen

Keys

Domain	Selector	Key	State	Use	What that means

Are your reports still arriving?

Domain	Receivers reporting	State	What that means	Worth knowing

Where each policy should go next

Domain	Published now	Next step	Verdict	What that means	Why	Worth knowing

Senders needing a decision

Address	Messages	Reports	First seen	Last seen	Why it is here

Cyber-Revolve access

Everything we have done to your tenant

When	Who	What	Did you authorise it?	Their stated reason	Tool or resource