DMARC Inspector
DMARC Policy Inspection
Inspect DMARC policy tags without fetching DNS.
Usage guide & examples
Start with the domain in the visible From header. Query TXT at _dmarc.[domain], then paste the record here. The optional domain field generates the initial DNS name; discovery of parent-domain policy is not performed.
v: version; p: policy (none / quarantine / reject); sp: subdomain policy; rua: aggregate reports; ruf: failure reports; adkim/aspf: DKIM/SPF alignment (r relaxed / s strict); fo: failure-report options (0/1/d/s). pct is a historic percentage tag, displayed but not applied under RFC 9989.
Alignment compares the visible From domain with the SPF-authenticated envelope domain or DKIM d= domain. Strict requires an exact match; relaxed permits the same organizational domain. DMARC needs at least one authenticated, aligned SPF or DKIM result. This tool does not evaluate a message.
Console flow / input example
_dmarc.example.com TXT v=DMARC1; p=reject; rua=mailto:dmarc@example.com; pct=100
Processed locally. No input is uploaded or stored.
Scope
Policy-tag inspection (RFC 9989). No DNS tree walk, organizational-domain discovery, report delivery or message alignment evaluation. Missing p defaults to none.
Result
Where do I use this result?
Query TXT at this name and paste the DMARC record into this page.
Generate DMARC DNS command