DMARC Lookup
Retrieve and validate the DMARC policy of a domain: tags, syntax, alignment, reporting addresses.
About the DMARC Lookup
DMARC tells receiving mail systems what to do with messages that fail SPF and DKIM alignment, and where to send reports about them. It is published as a TXT record at _dmarc.yourdomain.com. Since 2024 Google, Yahoo and Microsoft require a DMARC record from anyone sending meaningful volume.
This tool fetches the record from the authoritative name servers, validates every tag against RFC 7489, checks that external report addresses are authorised (the _report._dmarc record), and explains the effective policy — including inherited policies for subdomains.
What a good record looks like
v=DMARC1; p=reject; rua=mailto:dmarc@yourdomain.com; adkim=s; aspf=s; pct=100
Start with p=none and reporting, fix alignment for every legitimate sender, then move to quarantine and reject. The DMARC Generator builds the record for you; the Report Analyzer reads the aggregate reports you receive.
Related tools
Monitor this automatically
Get alerted when this check starts failing, when you land on a blacklist or when a certificate or domain is about to expire.
Start free monitoring