DMARC
Domain-based Message Authentication
Email authentication check
shawnk.ca
This check reviews the domain's email authentication setup to help protect against spoofing and phishing.
All data is public, sourced from DNS
Checked live in your browser
Running DNS checks in your browser...
Querying DMARC, SPF, BIMI, TLS-RPT, and MTA-STS records over DNS-over-HTTPS.
SPF
Sender Policy Framework
Score breakdown
Configuration
BIMI
Brand Indicators for Message Identification
Score breakdown
Configuration
TLS
Transport security · MTA-STS & TLS-RPT
Score breakdown
Configuration
Keep shawnk.ca protected automatically
This check is a snapshot. DNS records drift when providers change, teams edit records, or unauthorized changes slip in. DMARCTrust watches the same authentication layer continuously and tells you when something moves.
DMARC report processing
Aggregate and failure DMARC reports are received, parsed, and turned into sender visibility without manual XML handling.
DNS change alerts
DNS checks run every 5 minutes for monitored domains, with email alerts when DMARC, SPF, BIMI, TLS-RPT, or MTA-STS records change.
Receiver Shield for inbound
Deploy, host, and safely enforce MTA-STS and TLS-RPT when this checker finds an inbound transport gap.
Check another domain
Run a free email authentication check: DMARC, SPF, BIMI, TLS-RPT, and MTA-STS.
Explore
How other domains configure email authentication
Showing domains checked by our users. All data is from public DNS records.
What we check
DMARC policy and alignment, SPF record and includes, BIMI logo and certificate, and inbound transport security with MTA-STS and TLS-RPT.
Why it matters
Healthy authentication improves delivery and blocks spoofing. Major inbox providers increasingly expect DMARC and aligned SPF or DKIM from senders.
What you get
Syntax, policy, reporting validation, include analysis, alignment interpretation, and clear setup guidance for every result.