DMARC
Check your DMARC policy.
DMARC tells receivers what to do with mail that fails authentication. Most domains either have no record or run p=none, which asks receivers to do nothing. This checker grades the policy you actually have.
Questions
The details.
What is DMARC and what does p=none mean?
DMARC is a TXT record at _dmarc.yourdomain.com that sets policy for mail failing SPF and DKIM alignment: p=none (deliver anyway), p=quarantine (junk it), p=reject (refuse it). p=none is monitoring mode \u2014 useful for the first month, an open door after that. Anyone on earth can send as a p=none domain and receivers will do nothing.
Is DMARC required for cold email?
Since February 2024, Google and Yahoo require DMARC for bulk senders. Without it, volume sending to those inboxes gets throttled or junked regardless of how good the mail is.
What are rua reports and do I need them?
rua=mailto:... tells receivers where to send aggregate reports of who is sending as your domain. Without it, nobody is watching: you cannot see spoofing, and you cannot safely move from p=none to p=reject because you cannot see what would break.
What do pct and sp do?
pct applies the policy to a percentage of mail \u2014 pct=25 means spoofers get a free pass three times out of four. sp sets a separate policy for subdomains; sp=none under a strict p= is the gap attackers actually use.