Updated · Volt Ghost team
Policies
Policy (p=) | What receivers are asked to do | All listed domains | With working MX |
|---|---|---|---|
reject | Refuse failing mail | 582 | 568 |
quarantine | Deliver failing mail to spam | 789 | 768 |
none | Monitor only, send reports | 353 | 346 |
| Invalid value | Record is ignored | 1 | 1 |
79% of the policies ask receivers to act, not just watch. 262 records set a separate subdomain policy (sp=), 316 require strict DKIM alignment and 340 strict SPF alignment, and only 7 apply the policy to less than 100% of mail. The invalid one is a translation slip: p=nenhum, Portuguese for "none", published next to a second, correct record. Another 286 resolving domains answer at _dmarc with a TXT record that is not DMARC at all, usually a wildcard TXT copied from the domain's SPF.
Where the reports go
Report address domain (rua=) | Listed domains |
|---|---|
europeantechnical.ae (one mailbox) | 601 |
yandex.ru (one mailbox) | 114 |
dmarc-reports.cloudflare.net | 62 |
dmarc.everest.email | 62 |
onsecureserver.net | 52 |
trashmail.com | 15 |
1,199 records request aggregate reports and 403 request failure reports. Two destinations account for most of them, and each one maps to a single batch on the list:
- throwaway.io, 12 October 2026 (#1208). 644 of the 654 domains publish DMARC, 601 with
p=quarantineand reports to the same address ateuropeantechnical.ae. 566 of them also authorise Microsoft 365 in SPF. Many of the names read like air-conditioning and maintenance businesses in Dubai. Identical records across hundreds of domains point to one operator; the October 2026 page covers the batch. - temp-mail.org, 22 May 2025 (#593). All 114 domains publish
p=rejectwith strict alignment and reports to oneyandex.rumailbox, plus theip4:1.1.1.1 -allSPF record described on the SPF page. See the 2025 page for that year's batches.
Which services bother
| Mail server group | Domains with MX | With DMARC |
|---|---|---|
| mail.tm | 88 | 88 (100%) |
| erinn.biz / beavis99 hosts | 172 | 89 (52%) |
| Cloudflare Email Routing | 317 | 61 (19%) |
| Mailinator | 86 | 15 (17%) |
| GPTMail | 1,025 | 40 (4%) |
| Wabbly/Wally hosts | 341 | 0 (0%) |
mail.casadorock.com | 256 | 0 (0%) |
| TEMPMAIL.TW | 282 | 1 (0%) |
mail.tm publishes p=reject with strict alignment on every one of its domains. The erinn.biz group publishes p=reject; pct=100 on about half of its names. The Wabbly/Wally and casadorock pools publish SPF on every domain but DMARC on none, and the large GPTMail pool almost never publishes either.
By first-listed year
| First listed | Domains with MX | With DMARC | Share |
|---|---|---|---|
| 2018 | 1,533 | 365 | 24% |
| 2022 | 149 | 25 | 17% |
| 2024 | 117 | 18 | 15% |
| 2025 | 839 | 324 | 39% |
| 2026 | 3,728 | 841 | 23% |
2025 stands out because of the temp-mail.org batch above; without it the share falls to 29%.
What this means for you
For a site checking sign-ups, DMARC is not a disposable signal: it describes how a domain protects its own name when sending. Our guide on how sites detect disposable email explains what does work. For a normal provider's setup, see iCloud's DMARC quarantine policy, or run any domain through the SPF, DKIM and DMARC checker.
Check one domain
Paste one address or domain to check it against the disposable list, or see who hosts its mail. Single queries only.
Questions
How many disposable email domains publish DMARC?
1,725 of the 9,894 domains on our list copy on 9 November 2026. That is 25% of the domains with a working MX record, well under the 54% that publish SPF.
Does a strict DMARC policy stop a temp inbox from receiving mail?
No. DMARC only covers mail sent in the domain's name. A disposable domain with p=reject still receives verification codes normally; the policy just tells others to refuse forged mail from it.
What happens if a domain publishes two DMARC records?
RFC 7489 says policy discovery stops and DMARC is not applied, so the domain is treated as having no policy. 5 listed domains publish two records on 9 November 2026.
Can DMARC show whether an email address is disposable?
Not on its own. Real providers and temp mail services both publish it, and many temp mail domains publish nothing. Checking the domain against a disposable list is the reliable signal.
