All fixes

Add a DMARC record

dmarc-missing

SPF and DKIM only tell receivers what to check, never what to do when a check fails. A DMARC record is the part that actually blocks spoofed mail.

Cloudflare

  1. 1 Go to DNS > Records
  2. 2 Add a TXT record for _dmarc.yourdomain.com
Type: TXT
Name: _dmarc
Content: v=DMARC1; p=reject; rua=mailto:[email protected]

# p=none    (monitor only, start here)
# p=quarantine (send to spam)
# p=reject  (block entirely, goal)
Cloudflare docs

Does your app still have this?

Scan your domain