DMARC & Email Deliverability Validator for Agencies
Verify client domain compliance against Google and Yahoo bulk sender requirements. Run instant checks and protect client reputations.
Purpose of the Test
Verifies if a client domain publishes an enforced DMARC policy (p=quarantine or p=reject) and aggregate feedback reporting (rua), protecting brand reputation and meeting Google & Yahoo bulk sender mandates.
How It Works
Queries authoritative global DNS resolvers for the _dmarc.domain.com TXT record. Evaluates policy enforcement (p), alignment tags (aspf, adkim), percentage rollout (pct), and reporting destinations.
Limitations & Specifics
This tool audits published DNS authentication posture. It does not send synthetic test emails to verify dynamic SPF/DKIM header alignment in transit, nor does it inspect private corporate mail relays behind firewalls.
How to Interpret Your Results & Next Steps for Agencies
✓ Status: PASS (Enforced Compliance)
What it means: The domain enforces p=quarantine or p=reject with active aggregate report delivery. Spammers cannot impersonate this client, and emails sent from authorized ESPs will be delivered smoothly.
Next step: Monitor the domain continuously for unauthorized DNS drift or third-party service additions.
! Status: FAIL (Monitoring Mode - p=none)
What it means: The record collects diagnostic reports but provides zero anti-spoofing defense. Phishing emails claiming to come from your client will still land in victim inboxes.
Next step: Review aggregate reports to identify legitimate sending sources, configure SPF and DKIM for each, then upgrade the policy to p=quarantine and ultimately p=reject.
✗ Status: FAIL (Missing DMARC Record)
What it means: The domain has no DMARC record. In addition to severe spoofing exposure, bulk emails sent to Google and Yahoo recipients risk being rate-limited or sent directly to spam folders.
Next step: Generate a starter record immediately using our DMARC Generator and publish it at _dmarc.clientdomain.com.