The mail-auth DNS records any domain publishes

What this tool checks

• MX
  Mail exchange records — which servers accept mail for this domain Lists the inbound mail servers and their priority order.
• SPF
  Sender Policy Framework — which senders are authorized to send mail Counts the DNS lookups against the 10-lookup limit. A record that exceeds the limit silently stops being evaluated.
• DMARC
  Domain-based Message Authentication, Reporting and Conformance Reads the policy value and says what it enforces. p=none monitors only and enforces nothing.
• DKIM
  DomainKeys Identified Mail — cryptographic signatures for mail Checks the selectors you specify. DKIM selectors are not discoverable, so the tool asks which selectors to check and never reports "no DKIM" for selectors it did not look up.

How it works

No account, no tracking, nothing stored. Enter a domain and get a structured report of what is published in DNS right now.

1. Enter a domain name Type any domain — your own, a service you use, or one you are investigating.
2. DNS records are fetched live Mailrecord queries the public DNS using the system resolver. MX, SPF and DMARC are checked in parallel. DKIM selectors are checked individually.
3. A structured report is displayed Each record type shows the raw value, a plain-language explanation, and any constraints that matter — such as SPF lookup count against the 10-limit.

What this tool does not do

• It does not send or test mail delivery. A valid DNS record does not guarantee mail is delivered.
• It does not store domains, share results, or track users. There is no database, no account, and no logging of queries.
• It does not assign scores, ratings, badges or compliance stamps. The report is a factual description of published records.
• It does not scan subdomains or enumerate targets. Only the domain you type is checked.
• It does not offer email alerts, scheduled re-checks, or DMARC report ingestion. There is no mailbox in this fleet.