Check a DKIM key
Looks up the key at a selector you name. Selectors cannot be discovered from DNS, so leaving the field empty tries a list of common names instead — which is a guess, not a discovery.
The lookup runs in your browser. The domain you type goes to Cloudflare’s DNS resolver and nowhere else — there is no server of ours in between.