Look up any domain's email authentication records live, right in your browser, and get plain-English feedback on what's set up and what's putting your deliverability at risk.
DKIM needs a selector. Common ones: google (Google Workspace), selector1 (Microsoft 365), k1 (Mailchimp), dkim. Try a few if unsure.
Records are fetched over public DNS-over-HTTPS (Cloudflare/Google). Nothing is stored. A "not found" can also mean a record uses a different name or selector.