How it works Pricing Compare RoadmapVerify?Independent audit-log verifierDrop a signed export here (or pass it to our open-source CLI). The browser recomputes hashes, walks the Merkle chain, and checks the daily anchor against the public RFC 3161 timestamp. No Wiredepth login required - your auditor proves we haven't backdated, deleted, or reordered a single row.Docs Blog

Sign in Run a checkStatus

Looking up DMARC and SPF records...

Free tools

TLS / SSL check
DMARC analyzer
DNS health
Security headers
BIMI checker
MTA-STS + TLS-RPT
SPF flattener
DKIM checker + generator
DMARC report viewer
DMARC wizard
Subdomain inventory
Subdomain takeover scan
DNSSEC validator
CAA checker
CAA record generator
Certificate Transparency lookup
Reverse DNS bulk lookup
Reputation + threat intel
Can my domain be spoofed?
Spoofable brands index
IPv6 deliverability
Vendor security scoring
Vendor consolidation audit
Infrastructure map
Full domain check
Email-auth scorecard (PDF)
Audit workpaper templates

Wiredepth

Pricing
How it works
Compare alternatives
Compliance crosswalks
Live demo (mock data)
Verify an audit chain
Docs
Open-source CLI
Contact
Privacy
Terms
Refunds & billing
Sub-processors

© 2026 Wiredepth

Built independently.

←Domain check for google.com

DMARC check for

google.com

Checked 5/14/2026, 10:50:21 PM · 22ms

A

Solid: p=reject is enforced.

DMARC record

v=DMARC1; p=reject; rua=mailto:[email protected]

Policy (p): reject
Subdomain policy (sp): inherits p=reject
Enforcement % (pct): 100%
DKIM alignment (adkim): unset · defaults to r (relaxed)
SPF alignment (aspf): unset · defaults to r (relaxed)
Aggregate reports (rua): mailto:[email protected]
Failure reports (ruf): none

All tags (3)

vDMARC1DMARC version
prejectPolicy for the domain
ruamailto:[email protected]Aggregate report URIs

SPF record

Found on the apex domain.

v=spf1 include:_spf.google.com ~all

Recommendations

DKIM alignment (adkim) is unset, so it defaults to r (relaxed). That is fine for most deployments. Set adkim=s explicitly only if your DKIM d= header matches the From: domain exactly.
SPF alignment (aspf) is unset, so it defaults to r (relaxed). That is fine for most deployments. Set aspf=s explicitly only if your Return-Path aligns with the From: domain exactly.

AI-assisted remediation

Want a tailored fix plan in plain English?

Wiredepth Pro sends this report to our AI engine and streams back a 30-day rollout plan tailored to google.com, with provider-specific tips when we can infer them from the data. 10 playbooks per month on Pro, 100 on MSP.

ProSee Pro plans→

Wiredepth Pro

Want alerts the moment your DMARC policy weakens?

Continuous DMARC monitoring for google.com: alerts on policy regression (p=reject → p=quarantine → p=none), record drift, percentage rollout backslide, and SPF / DKIM alignment loss. Lookalike-domain watchlist catches typosquats spinning up new senders. AI-assisted remediation playbooks for each finding.

Starter from $30/mo, Pro $79/mo (full threat intel + brand watchlist). Cancel any time.

See Pro plans →What else is in Pro

Check another domain

Or share this URL with the team that owns the records.