deliverlensWhat this check does
Enter the domain that appears after @ in the visible From address. Deliverlens queries its _dmarc record and checks the published policy and common tags.
How to read your result
The report explains the policy requested by the domain, the SPF and DKIM alignment modes, and any reporting destinations or syntax problems it can identify. A DNS check cannot show whether a particular message passed DMARC.
What to do next
Resolve syntax and reporting problems first. Before moving to quarantine or reject, confirm that every legitimate sending service passes aligned SPF or DKIM and plan a monitored rollout.
Common questions
Should I change directly to p=reject?
Not before checking every legitimate sender. Start from measured authentication results and increase enforcement only when expected mail is aligned.
Why can a message fail when the DMARC record exists?
DMARC also requires aligned SPF or DKIM for that message. Publishing the policy alone does not create alignment.