Some World Cup partners are not actively protecting their domain name with the strongest DMARC policy.