Amazon AWS SES Domain Health
Browser-side MX / SPF / DMARC check, plus optional DKIM selector and custom MAIL FROM. Flags whether SPF includes Amazon SES. No AWS keys.
SES uses random DKIM selectors — leave DKIM blank to skip (shown as not checked, not a fail). Paste a selector from the SES identity console when you want a real DKIM pass/fail.