DMARC-RPT-SPOOFING
Someone is sending as your domain
What it means
A source that never passes authentication but sends in volume is using your domain without authorisation.
How to fix it
- 1Move DMARC to p=quarantine (then p=reject) so receivers discard it.
- 2Keep reading aggregate reports to confirm the volume drops.
Re-check after the change
DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.