tools / Email
DMARC validator
Fetch a domain's DMARC record, explain every tag and flag common mistakes.
Policy rejectRecords 1Resolver Cloudflare 1.1.1.1Time 3 ms
This domain has a strict DMARC policy. Receivers reject mail that fails DMARC. This is the strongest protection against spoofing.
v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; pct=100; rua=mailto:a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net,mailto:rua@cloudflare.com
Checks
- v=DMARC1 present and first.
- Enforcing policy: p=reject.
- Aggregate reports go to mailto:a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net,mailto:rua@cloudflare.com.
Tags
| Tag | Value | Meaning |
|---|---|---|
v | DMARC1 | DMARC version: DMARC1 |
p | reject | Failing mail is rejected outright |
sp | reject | Subdomains: failing mail is rejected outright |
adkim | r | DKIM alignment: relaxed (organizational domain match) |
aspf | r | SPF alignment: relaxed (organizational domain match) |
pct | 100 | Policy applies to 100% of failing mail |
rua | mailto:a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net,mailto:rua@cloudflare.com | Aggregate reports sent to mailto:a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net,mailto:rua@cloudflare.com |