LIVE DNS / DATED EVIDENCE / FREE
Did your DMARC
policy change?
Read the record at _dmarc.your-domain. Keep a dated copy before the next DNS edit.
Sharing publishes the domain and mail DNS records. Reporting addresses are hidden. One-off receipts expire after 30 days.
SAVE THE POINT OF COMPARISON
Come back to a useful history.
A code proves this inbox is yours. No password. Two domains per account; checks roughly daily.
Observe the published policy
The check identifies the published p=none, quarantine or reject tag. Multiple records or an unrecognised policy deserve review. This is an observation, not a complete tag validator.
Exact domain, explicit limits
If the exact name has no DMARC record, a parent-domain policy may still apply. This tool does not calculate inheritance, alignment or authentication results.
A receipt safe to share deliberately
The public receipt hides rua and ruf reporting destinations. Your original DNS snapshot stays in your private watch. A change must be confirmed before an alert is queued.