Preparing the frontend preview.
Review illustrative DNS records and preview authentication scenarios. No real DNS queries occur.
This example shows a verified Live-associated domain. Actual production eligibility requires backend validation.
These records are examples only. They were not generated for this domain and may not be valid for a real service.
SPF lists services permitted to send for this domain. This value is illustrative only.
notify.example.comv=spf1 include:_spf.mailflow.example ~allDKIM publishes a public key so receivers can check a message signature. This is not a real key.
mf1._domainkey.notify.example.comv=DKIM1; k=rsa; p=ILLUSTRATIVE_PUBLIC_KEY_NOT_VALIDDMARC describes how receivers should handle failed authentication. This policy is an example.
_dmarc.notify.example.comv=DMARC1; p=none; rua=mailto:reports@example.comChoose a demonstration outcome. No DNS lookup, ownership proof or real verification takes place.
Current example result: SPF Verified, DKIM Verified, DMARC Verified. Overall: Verified.
Preview a selector change. No cryptographic keys or DNS records are generated.
mf2._domainkey.notify.example.com TXT "v=DKIM1; k=rsa; p=ILLUSTRATIVE_ROTATED_PUBLIC_KEY"A real rotation would require publishing a new DNS record and verifying it before switching selectors.
Illustrative events recorded in this browser session.
Removing this domain from the preview does not remove DNS records at any provider.