DMARC checker

What happens to email that fails SPF and DKIM for this domain, and who hears about it?

Live lookupPlain English + technicalFree, no sign-updmarc.middle.network

How to read the results

The policy meter goes none → quarantine → reject. Only quarantine and reject stop spoofing.
rua is where daily reports go; without it you fly blind.

Check everything at once

The health check runs this and 30 more checks on a domain, then ranks what to fix.

Guides for auditors

Compliance checks

Domain audit Domain security audit ISO 27001 domain compliance check SOC 2 domain security check Cyber security compliance check

More in Email authentication

SPF checkValidate SPF and count the 10 DNS lookups.
DKIM checkFind DKIM keys and check their strength.
BIMI checkCheck your brand logo record for inboxes.
MTA-STS checkCheck encryption is enforced for incoming mail.
TLS-RPT checkCheck you get reports when secure delivery fails.
DANE / TLSACheck TLSA records for your mail servers.
SPF / DMARC / DKIM / BIMI generatorsBuild SPF, DMARC, DKIM, BIMI and MTA-STS records.

About the DMARC check

Check a domain’s DMARC record: policy, percentage, alignment, subdomain policy and where reports go, with advice on moving to enforcement.

Every result comes in two styles: plain English for everyone, and the exact technical detail for engineers, with the raw JSON one click away.

Questions

It’s safe to start with, but it doesn’t protect you. Use the reports to fix senders, then enforce.

The From domain must match the domain that passed SPF or DKIM. Relaxed allows subdomains, strict requires an exact match.