Email authentication

SPF, DMARC and MX on the registrable domain. No DKIM guessing.