DMARC-SP-NONE
Subdomains are exempt from DMARC
What it means
sp=none lets attackers send from any subdomain without consequence.
How to fix it
- 1Remove sp=none, or set sp to the same policy as p.
Re-check after the change
DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.