Email spoofing protection of a domain: MX, SPF (record, recursive DNS-lookup count, all qualifier), DMARC (p, sp, pct, rua), MTA-STS policy, TLS-RPT, BIMI, DKIM keys on common selectors, flags and a verdict.