Free check
Can someone send email as your church?
Type your church's web address (like firstumc.org). We look up three public records and tell you what they say.
Privacy. This runs in your browser. It asks public DNS (through Cloudflare, falling back to Google) for three records about the address you type. We don't receive, log or store it, though the DNS service that answers (Cloudflare or Google) sees the lookup, as it would for any website visit. It never contacts your website or mail server.
What the results mean
- Protected
- Your domain publishes a DMARC policy of quarantine or reject. Receiving mail systems are told to treat forged mail as suspect. Check the policy stays in place when you change email providers.
- Monitoring only
- You have a DMARC record with p=none. You can see reports, but forged mail is still delivered. It is a good first step; the email guide shows the next two.
- Not protected
- No DMARC record. Nothing you've published tells anyone to reject forgeries. This is the most common result.
- Couldn't check
- The lookup failed (network, or a mistyped address). It does not mean you have no protection. Try again.
- SPF
- A list of the services allowed to send mail for you. Useful, but on its own it doesn't stop forged mail that shows your address to the reader.