Check your domain's email authentication policy.
DMARC ties SPF and DKIM together with a policy telling receivers what to do when authentication fails. Three levels: none (monitor), quarantine (spam), reject (block). Required by Gmail and Yahoo for bulk senders since February 2024.