You're looking at a demo with sample data. Look around: nothing here can be changed.Start free with your own domain

TLS reporting

No TLS reports in this window. Publish a TLS-RPT record (under DNS records) that sends reports to us.

Where reports go

Email: tls-dtiadggrt5zwv5sk@dmarcloop.net
HTTPS: https://demo.dmarcloop.com/api/tlsrpt/dtiadggrt5zwv5sk

These checks also run every day.

MTA-STS

Checked 2026-11-11 05:09 UTC.

Not published

No _mta-sts record. MTA-STS makes senders insist on TLS to your mail servers; start in testing mode and watch the TLS reports.

BIMI

Checked 2026-11-11 05:09 UTC.

Not published

No BIMI record at default._bimi. Set one up under DNS records once the domain is at p=quarantine or p=reject.

DKIM keys

Selectors from your reports, the ones hosted here and common ones found in your DNS, looked up daily. Keys under 1024 bits are rejected by receivers; use 2048, and rotate a key after 365 days.

No selectors found yet.

Failure reports

Individual messages that failed DMARC, as receivers reported them. They can hold personal data, so we keep only the sending details (no subjects, recipients or content), delete them after a short retention, and record every view in the audit log.