Burned domain
A domain identity is so damaged that continued sending from it is no longer viable.
Problem summary
A domain identity is so damaged that continued sending from it is no longer viable.
Symptoms
- Widespread rejection or junking across providers
- Recovery attempts fail even at minimal volume
Possible causes
- Misconfiguration
- Incomplete rollout
- DNS propagation delay
How to diagnose
- Confirm the symptom in headers or reports
- Inspect the relevant DNS records
- Validate with a trusted checker
How to fix
- Correct the DNS or signing configuration
- Re-test and confirm alignment where required
How to verify
- Re-check DNS
- Send a test message
- Confirm expected authentication results
Prevention
- Document changes
- Monitor reports after deployment
When to escalate
- Production mail is failing authentication after a change window