Email health check, DMARC report analyzer and .eml checker
Check a domain's MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT and BIMI records in one click, then drop DMARC aggregate reports or .eml messages on the page to analyse them locally.
1. Check a domain
Only DNS names (for example _dmarc.example.com) are sent to Cloudflare public DNS after you press the button. DKIM selectors cannot be listed from DNS: about 23 common ones are tried, and a real message reveals the true selector in its DKIM-Signature s= tag.
2. Analyse DMARC reports and emails
DMARC compliance here works by upload: this page never reads a mailbox. Failure (forensic, ruf) reports can contain message content, so they stay in the browser and are not offered to AI. The .eml DKIM check is a second opinion; the receiving server's Authentication-Results is authoritative. Scores are a rule-based guide, not a deliverability guarantee.