Skip to content

Can someone send email as your domain?

Enter your domain to check its DMARC policy, SPF record, DKIM keys and mail servers. Results in seconds, explained in plain language.

  • Free, no sign-up
  • Runs in your browser
  • Works for .co.za and every other domain
Live record check Public DNS, nothing stored
  1. p=noneWatching only
  2. p=quarantineSent to spam
  3. p=rejectBlocked outright

Lookups run in your browser against public DNS. We do not see or keep the domain you enter.

Four lookups, four answers

_dmarc

DMARC policy

Which policy is set, and whether anyone receives the reports.

v=spf1

SPF record

One valid record, within the ten lookup limit.

_domainkey

DKIM keys

Keys at the selectors most platforms use.

MX

Mail servers

Who receives your email, if anyone.

Reading your result

No record

Wide open

Receivers have no instruction from you.

Start monitoring now
p=none

Watching only

Forged email is still delivered.

Align senders, then enforce
p=quarantine

Half way

Forgeries land in spam, still findable.

Confirm, then reject
p=reject

Protected

Forged email is refused outright.

Keep watching new senders

What a DNS check cannot see

A record check shows what you published. Only DMARC reports show who is actually sending as you, legitimate or not. That is what an enforcement decision has to rest on.

Why a record alone is not protection

About this tool

  • Lookups go from your browser to Google Public DNS, with Cloudflare as fallback. We never receive the domain.
  • A subdomain without its own record may inherit its parent’s policy.
  • The SPF count covers the top level only. Nested includes count too.

DMARC checker questions

Short answers about what the checker does and what to do next.

Is this DMARC checker free?

Yes. There is no sign-up and no limit. The lookups run in your browser against public DNS, so the domain you enter is never sent to MailMarq.

What does the DMARC checker test?

It reads four public DNS records for your domain: the DMARC policy at _dmarc, the SPF record, DKIM keys at the selectors most platforms use, and the MX records that show who receives your email. It then gives one verdict and explains each result in plain language.

My domain shows p=none. Is that a problem?

p=none only monitors. Receivers still deliver email that forges your domain, so it gives no protection on its own. It is the right first step, and the goal is p=reject once every legitimate sender passes.

Why does it say no DKIM key was found when we use DKIM?

DKIM keys live at selectors, which can have any name, and the checker tries the common ones only. Find the s= value in a message header with the email header analyser, then confirm the key in the DKIM checker.

How often should I check my domain?

Whenever you add or change an email service, and at least monthly. A record check shows only what you published. DMARC aggregate reports show who is actually sending as your domain, which is what MailMarq monitors for you.

More free tools

SPF checkerValidate your SPF record, count DNS lookups and map every include.DKIM checkerFind DKIM keys at common selectors and check their length and flags.DMARC generatorBuild a valid DMARC record with every option explained.SPF generatorCombine every sending service into one SPF record under the limit.Email header analyserSee if a message passed SPF, DKIM and DMARC, and where it was delayed.All free toolsEvery checker, generator and analyser in one place.

Find out where your domain stands

Send us your domain. We will review your DMARC, SPF and DKIM set-up, map the services sending as you, and tell you plainly what it would take to reach enforcement. No charge and no obligation.

Scroll to Top