Mail Domain Check

Current-standard policy discovery

DMARC policy checker

Find the policy that receivers should apply after the bounded RFC 9989 DNS Tree Walk, including inherited p, sp, or np behavior.

Live DNS check

INPUT

Visible From domain

The domain is sent to this service for public DNS checks. Free analytics retain an irreversible domain hash and aggregate metrics, not the raw value.

Use the domain after From: in the message users see. A parent record can control it even when _dmarc at this exact domain is empty.

RESULT

Applied policy

No domain checked

Enter the visible From domain to test its direct record and the bounded parent-domain policy path.

RFC 9989 discovery

An empty direct lookup does not always mean no DMARC

Direct lookup_dmarc.From-domain

One valid Policy Record at the Author Domain is used immediately. Multiple Policy Records at one target are discarded.

DNS Tree WalkAt most eight queries

If the direct target has no usable record, discovery walks a bounded parent path and respects DMARC public-suffix boundaries.

Inherited policyp, sp, or np

Existing subdomains can use sp; nonexistent subdomains can use np. Otherwise the selected record's p applies.

Primary references: RFC 9989 DMARC and RFC 9990 aggregate reporting. RFC 9989 replaced RFC 7489 and made pct historic.