DMARC Lookup

Domain name

Open in terminal
Try:

How it works

The server queries TXT at _dmarc.<domain> (falling back to the organizational domain), validates the tags and checks that external report destinations have authorized receiving reports.

Safeguards & responsible use

  • Only public domain names are accepted; internal names (.local, .internal, …) are rejected.
  • Queries go to public resolvers, never to internal DNS.
  • Per-client rate limiting and query timeouts.

Frequently asked questions

Which DMARC policy should I use?

Start with p=none and reporting enabled, fix the sources that fail, then move to quarantine and finally reject.

Why do I need SPF or DKIM alignment?

DMARC passes only if SPF or DKIM passes for a domain that matches the visible From: domain.