DoH resolver:
Fetch and validate the SPF (Sender Policy Framework) record for a domain. Shows the raw record, parsed mechanisms, and a plain-language interpretation of the policy.
Look up DKIM (DomainKeys Identified Mail) public key records for a domain and selector. Validates the key is present and decodes key type, flags, and public key data.
Fetch and validate the DMARC record for a domain. Shows the full parsed policy including sub-domain policy, percentage, and reporting addresses.
Look up DNSKEY (zone signing public keys for DNSSEC) and DS (delegation signer hashes) records.
Complete DNS health report: A/AAAA reachability, MX mail setup, SPF, DMARC, NS authoritative servers, SOA serial, and DNSSEC status.