DMARC_RECORD_MALFORMED

error

A DMARC record exists but cannot be read, so receivers will behave as though there is no policy.

Something is wrong and mail or certificates are affected.

How we know

dmarc.test
Policy discovery and semantics. own.dmarc.test publishes its own policy so the exact-name lookup wins; inherit.dmarc.test publishes none so sp= applies. Also multiple records, a policy sharing a name with an unrelated TXT, v= not first, no p=, and an out-of-range pct.