Can a scammer send email that looks like it's from your hospital, school, or charity?
It checks whether a domain enforces DMARC — the setting that stops anyone from forging its address. Public DNS, runs in your browser, nothing about you is sent anywhere.
🎣 Trusted institutions a scammer could impersonate