Most domains fail this without knowing it. We audited a random sample of 60 real business domains in September 2026: 46 of them — 77% — had no DMARC record at all, or a policy that only monitors and never blocks. Gmail, Yahoo and Microsoft all now enforce sender rules that check this. Enter a domain and get the real answer in seconds.