Is that DKIM record actually right?

Check a selector, or scan a domain for the ones it publishes. Paste a message’s headers, or send a test email to a throwaway address, to see how it was really signed. No accounts.

Leave empty to scan the known-selector list.

TXT
selector*label._domainkey.domainexample.com

Paste a message’s headers

Every DKIM-Signature is parsed, the key it names is looked up in DNS, and the signature is verified.

Analyse headers

Send a test email

Get a throwaway address, send it anything, and see how the message was really signed, including selectors nobody could guess.

Get an address