Check a domain's SPF, DKIM and DMARC records in one go, find what lets attackers send email in its name, and get the exact records to fix it.
Find it in the s= value of the DKIM-Signature header on an email you sent. We already try about 40 common ones.