DMARC Lookup
Check the DMARC record for any domain and get an AI-powered analysis to ensure your email is secure from spoofing.
Get Your Full Domain Health Report
Enter your domain to perform the lookup.
DMARC Tag Explanations
| Tag | Description |
|---|---|
| v | The version tag. The only allowed value is "DMARC1". If it's incorrect or the tag is missing, the DMARC record will be ignored. |
| p | The DMARC policy. Allowed values are "none", "quarantine", or "reject". It instructs mail servers on how to handle emails that fail DMARC checks. |
| rua | Aggregate report sending destination. A URI (typically `mailto:`) where aggregate DMARC reports should be sent. Essential for monitoring. |
| ruf | Forensic (Failure) report sending destination. A URI for sending detailed, individual failure reports. Support varies among providers. |
| sp | The subdomain policy. Defines the policy for subdomains if different from the main domain's policy. If absent, subdomains inherit the `p` policy. |
| adkim | The alignment mode for DKIM. Can be "r" (relaxed) or "s" (strict). Relaxed is the default and allows DKIM to pass for subdomains of the `From:` header's domain. |
| aspf | The alignment mode for SPF. Can be "r" (relaxed) or "s" (strict). Relaxed is the default and allows SPF to pass for subdomains of the `Return-Path` domain. |
| fo | Forensic reporting options. Specifies the conditions under which a forensic report should be generated. Default is "0" (if both SPF and DKIM fail). |
| rf | The reporting format for failure reports. The most common value is "afrf" (Authentication Failure Reporting Format). |
| pct | The percentage tag. Applies the DMARC policy to a percentage of failing emails, allowing for gradual policy rollout. If omitted, it defaults to 100%. |
| ri | Reporting interval. A desired interval in seconds for receiving aggregate reports. The default is 86400 (one day), though providers may send reports at their own cadence. |
DMARC Frequently Asked Questions
Privacy & Usage Notice
The domain you enter is used solely to perform the requested DNS lookup and generate the analysis. We log the domain for internal analytics and to monitor tool usage, but we do not store it with any personal identifiers. For more details, please see our Privacy Policy.