Pazmo
New run
Sign in
arrow_backBack to your run
Medium carddns.dmarc_missing

Email pretending to be you can pass

Play this card on https://example.com. Everything a developer (or your AI agent) needs to fix and verify it — free. Fixing your own site is never paywalled.

visibilityCard text — what this means

Demo DNS evidence shows no _dmarc TXT record for the domain.

DMARC helps receivers decide what to do with mail that fails SPF or DKIM alignment.

Preview ingestion checks sanitized _dmarc TXT evidence only and does not inspect aggregate reports.

playing_cardsHow to play it

Publish a DMARC TXT record in monitoring mode first, then move toward enforcement after sender alignment is understood.

  1. 1Confirm SPF and DKIM alignment for legitimate senders.
  2. 2Publish a v=DMARC1 TXT record at _dmarc with a monitoring policy.
  3. 3Review reports and progress toward quarantine or reject when ready.

Fix it on your stack

Add this record at your DNS provider — it's the same regardless of web stack.

dns
Type: TXT
Host/Name: _dmarc
Value: v=DMARC1; p=none; rua=mailto:dmarc@your-domain.example

infoStart in monitoring mode (p=none) and review aggregate reports before moving to quarantine or reject. Add this record at your DNS provider (registrar or DNS host) — it is the same regardless of web stack.

workspace_premiumClaim your endorsement

Sanitized DNS evidence showing a v=DMARC1 TXT record at _dmarc.

Evidence needed: Sanitized DNS evidence showing a v=DMARC1 TXT record at _dmarc.

Related controls

Readiness mapping only — evidence relevant to these controls. Pazmo does not determine, certify, or guarantee compliance.

  • A.8.21 · Security of network services (ISO/IEC 27001:2022)
Email securityVendor readiness
smart_toyHand this card to your AI agentBack to your run