prefixkit RU

DNS, SSL & email

DMARC report analyzer

Load DMARC aggregate reports (xml, gz, zip) from Google, Microsoft, Yahoo and others to see every source sending as your domain, who passes SPF and DKIM, where spoofing is, and when p=reject is safe.

Where reports come from

Mail providers send reports daily to the address in the rua tag of your DMARC record, for example v=DMARC1; p=none; rua=mailto:dmarc@example.com. Build the record with the SPF and DMARC generator.

Moving to p=reject

  1. Start with p=none and collect 1–2 weeks of reports.
  2. For each of your services (mail, CRM, newsletters, website) set up DKIM with your domain and add it to SPF.
  3. When 98–99% pass, switch to p=quarantine, then p=reject.

Look at a single message

Why a specific message failed is shown by the email header analyzer.