Email Spoofing Explained

Serious issue: Attackers send emails pretending to be from your domain.

Check Current Authentication

cPanel → Email Deliverability → See SPF, DKIM, DMARC status.

Implement DMARC Policy

Add DMARC Record

v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com; ruf=mailto:dmarc@yourdomain.com; fo=1

Full Protection Stack

SPF + DKIM + DMARC

All three required for maximum spoofing protection.

DMARC Policy Table

PolicyActionWhen to Use
p=noneMonitor onlyInitial setup
p=quarantineSpam folderTesting phase
p=rejectBlock emailProduction