Free domain check — no signup
Know who's sending mail as your domain.
Most domains have never seen a DMARC report. Check what's publicly exposed right now, then use the guide to move from visibility to a fully enforced policy — without breaking mail flow along the way.
v=DMARC1; p=quarantine; rua=mailto:reports@dmarcvault.com
- v=DMARC1
- Protocol version — marks this as a DMARC record
- p=quarantine
- Policy — mail that fails goes to spam, not the inbox
- rua=mailto:…
- Where aggregate pass/fail reports get sent
The risk
Anyone can send email that looks like it's from you
Without SPF, DKIM, and DMARC configured, there's nothing stopping someone from sending phishing mail that appears to come from your domain — and nothing telling you it's happening.
Look-alike phishing
Attackers spoof your domain to target customers, partners, or your own employees — no compromise required, just a forged From: header.
No visibility
Without a DMARC rua= address, you never see the spoofing attempts — or the misconfigured senders that are legitimately yours.
Reputation risk
Spoofed mail sent "from" you can land in inboxes before anyone notices — or land your real mail in spam once receivers stop trusting the domain.
What's here today
Start with what's actually live
LIVE
Check Domain
Free, instant SPF and DMARC lookup for any domain, right in your browser — no signup, nothing stored.
Check a domain →IN DEVELOPMENT
Monitoring dashboard
Parsing your own aggregate DMARC reports and showing exactly what's sending mail as your domain over time. Still being built.
The path
From blind spot to enforced policy
- 01Check your exposure
Run the free domain check to see what SPF and DMARC records are actually published right now — most domains have none.
- 02Understand what’s missing
The guide breaks down what SPF, DKIM, and DMARC each verify, in plain language, no prior DNS knowledge assumed.
- 03Roll out enforcement safely
Move from p=none to p=quarantine to p=reject in stages, watching reports at each step so legitimate mail never gets silently blocked.
Where this stands
Built by one person, in the open
Check Domain is real and live today. The monitoring dashboard, the guide, and the blog are how the rest gets built — no company, no sales pitch, no mailing list.