DMARC Lookup
Articles, guides, and in-depth tips for the DMARC Lookup — everything you need to get the most out of it.
✦ AI-powered — understands natural language
Why DMARC Forensic Reports Are Almost Never Deployed — ruf=, Privacy, and the pct= Gradual Rollout Strategy
What DMARC Aggregate Reports Actually Tell You — and How to Turn Raw XML Into an Authorized Sender Inventory
DMARC aggregate reports arrive as zipped XML — effectively unreadable without tooling — and the organizations generating the most complex reports are exactly those with the most to learn from them. Here's what each field in an aggregate report actually tells you, the two-type categorization of findings (legitimate-unauthenticated vs hostile), the recommended inventory-building process before moving to p=reject, and how third-party DMARC reporting services make this data actionable.
DMARC for Domains That Never Send Email: Why p=reject Can (and Should) Be Immediate
A domain that never sends email is, paradoxically, an easy spoofing target — recipients have no way to know "this domain never sends mail" without DMARC explicitly saying so. Here's why p=reject can be applied immediately (with zero risk) to parked/non-sending domains and subdomains, how sp= protects subdomains separately from the primary domain's policy, and why BIMI specifically requires p=quarantine or p=reject, not p=none.
DMARC Alignment: Why SPF and DKIM Can "Pass" While DMARC Still Fails
"SPF passes" and "DKIM passes" don't mean DMARC passes — DMARC additionally requires alignment between the visible From domain and the domain that actually passed SPF or DKIM. Here's the distinction between envelope sender and visible From, relaxed vs strict alignment, and why DMARC passes if EITHER SPF or DKIM is aligned — the key to debugging most DMARC failures with third-party senders.
Reading DMARC XML Reports: What Every Field Means and How to Spot Problems
DMARC aggregate reports are XML files that arrive by email and most people never open. Here's exactly what each field means, the common patterns and what they signal (SPF fail but DMARC pass, alignment failures, unknown IPs), and the tools that make reports readable.
DMARC Deployment: How to Move from p=none to p=reject Without Breaking Email
Most DMARC records are at p=none — monitoring mode with no actual protection. Here's the safe four-phase path from p=none to p=reject, how to read aggregate reports, the February 2024 Google/Yahoo requirements, and common mistakes.
DMARC Lookup — Check Your Domain's Email Policy & Anti-Spoofing Protection
Learn how DMARC works, what the none/quarantine/reject policies mean, how to read a DMARC record, and how to use a free DMARC lookup to diagnose email authentication and spoofing protection.
