No DMARC record
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a DNS record that tells the world's email providers how to handle emails that claim to come from your domain but have not been authenticated. No DMARC record was found.
Why this matters
Without DMARC, there is no published policy telling receiving mail servers what to do with email that fails authentication, which makes it easier for someone to send phishing emails that appear to come from your domain. Staff, customers and partners could be deceived. Large mailbox providers such as Gmail and Yahoo also require DMARC for bulk senders, so lacking it may affect deliverability if you send high-volume email.
How to fix it
Add a DMARC TXT record at _dmarc.yourdomain.com. Start with a monitoring-only policy (p=none) that sends reports to a free monitoring tool like Dmarcian or EasyDMARC. After reviewing 4 weeks of reports, tighten the policy to quarantine and then reject. This requires SPF and DKIM to be set up first.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.
Start Full Audit