---
title: "Missing DMARC Records"
canonical: "https://kb.cynergy.app/space/MD/899416260/Missing%20DMARC%20Records"
format: markdown
---
**Description **

DMARC provides an additional layer of protection against email spoofing attacks, that also allows investigation of historical email spoofing attempts against your organization.

**Hacker's View**

As a hacker, I identified that there is a missing DMARC record for a domain, which makes my domain spoofing attack simpler. I have fewer security controls to bypass and there is a higher chance that my malicious email with a spoofed domain of my victim organization will arrive at the mailbox/ 

**Mitigation**

There is a defined policy to comply with, which can be found [here](https://dmarc.org//draft-dmarc-base-00-01.html#iana_dmarc_tags)

**Cynergy’s View**

DMARC provides an additional layer of security to emails, is it enough? NO.

Hackers have multiple techniques to get into your mailbox, yet once you configure SPF, DKIM, and DMARC records correctly, you reduce dramatically the probability of a malicious email getting into the mailbox. 

**Reference**

AWS - [https://docs.aws.amazon.com/ses/latest/dg/send-email-authentication-dmarc.html](https://docs.aws.amazon.com/ses/latest/dg/send-email-authentication-dmarc.html) 

GCP - [https://support.google.com/a/answer/2466563?hl=en](https://support.google.com/a/answer/2466563?hl=en) 

Azure - [https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/use-dmarc-to-validate-email?view=o365-worldwide](https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/use-dmarc-to-validate-email?view=o365-worldwide) 

Cloudflare - [https://www.cloudflare.com/learning/dns/dns-records/dns-dmarc-record/](https://www.cloudflare.com/learning/dns/dns-records/dns-dmarc-record/)