DMARC Snapshot — Current Policy from DNS History
Current DMARC snapshot from dns-history — not multi-resolver global propagation polling
How to Use This Tool
- Enter the organizational domain that publishes DMARC (apex).
- dns-history fetches multi-type apex records plus _dmarc TXT.
- DMARC strings appear when _dmarc label resolves publicly.
- summary.hasDmarc and emailAuth.dmarc accelerate triage.
- queriedAt timestamps capture; note states snapshot limits.
- Diff archived JSON to track DMARC policy changes during rollout.
About This Tool
DMARC policy at _dmarc.example.com propagates through TXT caches slower than teams expect when moving from p=none to reject. VSPIC DMARC propagation checker runs dns-history, which queries apex multi-type records and fetches _dmarc TXT separately, returning DMARC strings in records, byType, summary.hasDmarc, emailAuth.dmarc, queriedAt, and note clarifying current snapshot scope — not geographic resolver grids or passive DNS archives.
Confirm v=DMARC1 policy strings publish now, archive exports before and after policy escalations, and pair with dmarc-record-checker for structured validation. We document honestly: one public DNS vantage at query time, not global propagation percentage.
Common use cases
- •View all DNS records of a domain after migration
- •Confirm DNS records after domain changes
- •Test for DNS leaks when using a VPN
- •Debug email delivery with MX and TXT records
Why use VSPIC for ?
- DMARC TXT visible with summary.hasDmarc flag.
- emailAuth.dmarc block for structured policy review.
- queriedAt for authentication change evidence.
- Honest framing — no fake propagation map.
- Full zone context alongside SPF TXT in same export.
- Free instant snapshot — no account required.
Honest scope — DMARC snapshot not global poll
Commercial propagation tools query many resolvers for _dmarc TXT agreement. dns-history returns one current public snapshot including dedicated _dmarc lookup — the policy string visible at query time from our path.
Repeated snapshots you save are the practical way to track DMARC drift during policy escalations.
Reading DMARC from dns-history output
_dmarc TXT appears in records and may populate emailAuth.dmarc with parsed details when found. summary.hasDmarc gives a quick boolean for dashboards.
queriedAt ISO timestamp attaches to policy change tickets. note reminds that external resolver caches may still hold old _dmarc until TTL expiry.
DMARC escalation workflow
Pre-change: snapshot and store JSON at p=none. Publish p=quarantine or reject. Snapshot hourly; diff until _dmarc string matches approved policy. Monitor rua reports separately while watching DNS publication.
Sudden _dmarc deletion during unrelated TXT edits is a common incident — diff exports catch it faster than waiting for spoofing complaints.
DMARC and SPF alignment context
Full dns-history export includes apex SPF TXT in the same run — policy enforcement depends on SPF and DKIM alignment, not DMARC TXT alone.
Pair with email-authentication-tester when scoring spoofing risk after DMARC publishes.
TTL and external cache reality
Authoritative _dmarc may update while receivers cache prior policy. Single snapshot cannot see all caches. Wait TTL multiples and re-snapshot before declaring completion.
DNS TTL checker on _dmarc helps estimate wait windows.
Why dns-history instead of DMARC-only lookup
Holistic snapshot captures MX and SPF beside _dmarc in one export — mail authentication cutovers need correlated evidence. API action dns-history with domain parameter.
Dedicated DMARC checker pages emphasize tag validation; propagation family emphasizes honest snapshot diffs.
Validation limits of snapshot-only checks
Published v=DMARC1 does not prove rua mailboxes accept reports, pct covers all subdomains, or receivers enforce p= immediately. Follow with dmarc-record-checker and aggregate report review.
Missing _dmarc in snapshot means none returned on this path — confirm DNS host and label spelling.
Relationship to DKIM and SPF propagation pages
DKIM and SPF propagation siblings use identical dns-history backend with record-type-focused SEO. JSON shape is the same full snapshot — filter _dmarc fields in scripts.
Run all three snapshots during major mail DNS migrations.
API automation
GET /ip-tools/api/extended?action=dns-history&domain=example.com. Parse emailAuth.dmarc or TXT at _dmarc from export. Alert when policy tag differs from approved baseline during change freeze.
Integrate with CI after Terraform DNS modules apply DMARC records.
Important notes & limitations
- NOT global resolver DMARC polling worldwide.
- Single lookup path — one resolver vantage.
- Does not parse every DMARC tag or validate rua reachability.
- Subdomain DMARC policies need that subdomain entered.
- Receiver caches may use old _dmarc until TTL expires.
- Does not ingest aggregate DMARC reports (rua).
Frequently Asked Questions
Yes. VSPIC offers this DMARC propagation checker at no cost with no account required. Results load in real time.
We do not permanently store your queries on our servers. Some tools run entirely in your browser; others fetch public data for the request only.
Yes. Open the page in any modern phone or tablet browser. Results work on Wi‑Fi and mobile data.
No. dns-history returns a current _dmarc snapshot from one public lookup path — not worldwide propagation polling.
dns-history with a domain parameter.
At _dmarc.yourdomain via dedicated lookup, reflected in emailAuth.dmarc and summary.hasDmarc when found.
It shows published _dmarc TXT. Deep tag validation and report mailbox tests use dmarc-record-checker.
Archive repeated dns-history exports, diff _dmarc strings over time, wait TTL cycles, and confirm receiver policy via mail tests and rua reports.
dns-history returns all common record types at apex. Mail authentication cutovers often need SPF verification in the same snapshot.
Next step for your check
Continue with dmarc record checker on VSPIC.
Related Tools
Explore more free VSPIC tools for IP, DNS, security, and network diagnostics.
DMARC Record Checker
DMARC Record Checker — free online tool
Use Free →SPF Propagation Checker
SPF Propagation Checker — free online tool
Use Free →DKIM Propagation Checker
DKIM Propagation Checker — free online tool
Use Free →Email Authentication Tester
Email Authentication Tester — free online tool
Use Free →DNS Lookup Tool — DNS Checker
Free DNS lookup tool and DNS checker — query A, AAAA, MX, TXT, NS, CNAME, and SOA records for any domain.
Use Free →Reverse DNS Lookup
Resolve IP addresses to hostnames via PTR records
Use Free →
Trusted by Users Who Value Privacy
Always Free
No premium plan ever
100% Private
Files processed in browser
Instant Results
Convert in seconds
Works Everywhere
Any device, any OS