DMARC Analyzer
by TheBRHub
Your domain is either protected
or it's being spoofed right now.
Check your DMARC, SPF, and DKIM records in under 2 seconds. Get an instant compliance grade, pinpoint exactly what's misconfigured, and know whether Google and Yahoo will accept or reject your emails.
Check multiple domains at once. Paste up to 50 domains, one per line.
Compare email authentication between two domains side by side.
| Source IP ▲ | Messages ▼ | DMARC ▲ | SPF ▲ | DKIM ▲ | SPF Align ▲ | DKIM Align ▲ |
|---|
Monitored Domains
0/10Get email alerts when DNS records change or compliance scores drop.
DMARC Record Generator
Configure your DMARC policy below and copy the generated TXT record into your DNS.
76% of domains have misconfigured
email authentication
Without proper DMARC, anyone can send emails pretending to be you. Your customers, partners, and vendors have no way to verify the difference.
Domain Spoofing
Attackers forge your domain in the "From" header. Without DMARC enforcement, receiving servers have no policy to reject these fakes — and your brand takes the hit.
Inbox Rejection
Google and Yahoo now require DMARC for bulk senders. Missing or misconfigured records mean your legitimate emails bounce or land in spam — silently.
Partial Setup
SPF without DKIM. DKIM without DMARC. A "p=none" policy that monitors but never enforces. Partial authentication gives you a false sense of security.
This tool shows you exactly where you stand — in seconds.
Enter your domain. Get a complete authentication breakdown: DMARC record parsing, SPF mechanism analysis, DKIM key validation, MX record discovery, and a weighted compliance score that tells you whether you're protected or exposed.
Four protocols analyzed. One clear verdict.
Every check runs a real DNS lookup — no cached data, no stale results.
DMARC record parsing that actually explains things
Most DMARC checkers dump raw DNS records and call it a day. Ours breaks every tag apart, explains what it does, and tells you whether the configuration is helping or hurting your deliverability.
- ✓ Full tag-by-tag breakdown: p, sp, rua, ruf, adkim, aspf, pct
- ✓ Policy strength assessment (none → quarantine → reject)
- ✓ Aggregate report (rua) destination validation
- ✓ Subdomain policy inheritance analysis
- ✓ Instant DMARC record generator for fixing issues
SPF validation — including the lookup limit most people miss
SPF has a hard limit of 10 DNS lookups. Exceed it and your entire SPF record silently fails, even if the syntax is perfect. We count every include, a, mx, and redirect to flag this before it becomes a deliverability disaster.
- ✓ Mechanism-by-mechanism breakdown (include, a, mx, ip4, ip6)
- ✓ DNS lookup counter with warning at 10+ lookups
- ✓ All-mechanism policy check (hardfail vs softfail vs neutral)
- ✓ Nested include resolution and flattening
- ✓ ESP auto-detection (Google, Microsoft, Zoho, ProtonMail)
DKIM key lookup with auto-detection
DKIM selectors are the #1 source of confusion in email authentication. We auto-detect your ESP and try common selectors (google, selector1, selector2, k1, default) — so you don't need to dig through DNS records yourself.
- ✓ ESP auto-detection from MX records
- ✓ Common selector brute-force (6 selectors tested)
- ✓ Key type and bit length validation
- ✓ Custom selector input for non-standard setups
- ✓ Multi-selector support for multiple ESPs
MX records reveal more than you think
Your MX records tell us which email provider you're using, and that changes everything — from expected DKIM selectors to sending rate limits. We cross-reference MX data with SPF and DKIM to catch mismatches between your DNS and your actual mail infrastructure.
- ✓ Full MX record listing with priority values
- ✓ ESP identification (Google, Microsoft, Zoho, etc.)
- ✓ Cross-reference with SPF includes for consistency
- ✓ Missing MX detection (common with parked domains)
- ✓ ESP-specific rate limit awareness
Built for agencies and teams, not just one domain
Analyze, compare, and monitor at scale — all from the same interface.
Bulk Analysis
Paste up to 50 domains and get a compliance report for each one in a single batch. Export as CSV for client reporting or internal audits.
Side-by-Side Compare
Enter two domains and see a detailed head-to-head comparison. Which one has stricter DMARC? Better SPF? Stronger DKIM? See the diff instantly.
DMARC Report Upload
Drop your XML aggregate reports (the ones Google and Yahoo send you) and get a visual breakdown of pass rates, failing sources, and sender IP analysis.
Domain Monitoring
Add domains to your watchlist and check their status on demand. Track changes over time and catch misconfigurations before they impact deliverability.
Record Generator
Don't just find the problem — fix it. After analysis, our built-in generator creates a properly formatted DMARC record you can copy straight into your DNS.
PDF Export
Generate a professional PDF report of your analysis — complete with scores, records, and recommendations. Perfect for sharing with clients or leadership.
DMARC is one piece of the puzzle
Deliverability depends on authentication, reputation, and infrastructure. These free tools cover the rest.
Blacklist Intelligence
Check if your IP or domain is listed on 90+ real-time blacklists. Get severity scoring and guided delisting instructions.
Check Blacklists →Email Header Analyzer
Paste any email header and trace the full delivery path — authentication chain, routing hops, delays, and spam scoring.
Analyze Headers →Domain Diagnostics
Full DNS record retrieval — MX, A, AAAA, CNAME, TXT, NS — with ESP identification and priority mapping.
Lookup DNS →Spam Score Tester
Score your email content against common spam triggers. Find what's dragging your messages into junk before you hit send.
Test Score →Bounce Analyzer
Parse bounce-back messages to identify whether it's a hard bounce, soft bounce, policy rejection, or server misconfiguration.
Analyze Bounces →DeliverCORE
All of these tools — plus continuous monitoring, client management, and warmup orchestration — unified in one platform.
Learn More →Common questions
Don't guess. Know.
Run a free analysis right now, or talk to our deliverability team about fixing what's broken.