C
conductor

Fix library / who-is-sending-as-me

HIGHOften searched as: "how to read dmarc reports"

Find out exactly who's sending email pretending to be your domain

WHAT YOU'RE SEEING

You suspect (or know) that your domain is being spoofed for spam or phishing.

WHY IT'S HAPPENING

Without proper DMARC enforcement, anyone can put your domain in the From field of emails. Aggregate reports (RUA) from major receivers tell you exactly which IPs are doing this.

How to fix it

  1. 1

    Make sure your DMARC record has a rua= tag pointing to an inbox you control.

  2. 2

    Reports start arriving daily within 1-3 days of publishing.

  3. 3

    Reports are gzipped XML — use a parser (or Conductor!) to read them.

  4. 4

    Look for source IPs you don't recognize sending mail with high failure rates.

  5. 5

    Once identified, either add them to your SPF (if legitimate) or escalate your DMARC policy to p=reject to block them.

Where do I add these records? (by DNS host)

Records go in the DNS panel of whoever hosts your domain, not inside Gmail or Outlook. Find your host below.

Cloudflare

  1. 1.Log in and pick your domain.
  2. 2.Open the DNS tab, then Records.
  3. 3.Click Add record, choose the type (TXT/CNAME), paste the Name and Value, Save.
  4. 4.Tip: Conductor can apply Cloudflare records for you. Connect a token on your domain page instead of doing this by hand.

GoDaddy

  1. 1.Go to My Products, find your domain, click DNS.
  2. 2.Under Records, click Add.
  3. 3.Pick the type, enter the Name (Host) and Value, Save. Use "@" for the root domain.

Crazy Domains

  1. 1.Log in, go to My Account, then Manage next to your domain.
  2. 2.Open DNS / Manage DNS.
  3. 3.Add a record, choose the type, enter the Hostname and Value, Save.

VentraIP

  1. 1.Log in to VIPControl, open Domain Names, click your domain.
  2. 2.Choose Manage DNS / DNS Zone.
  3. 3.Add a record with the type, name and content shown above, Save.

Squarespace / Google Domains

  1. 1.Open Settings, then Domains, and pick your domain.
  2. 2.Choose DNS Settings, scroll to Custom Records.
  3. 3.Add the record type, host and data, Save.

Namecheap

  1. 1.Go to Domain List, click Manage next to your domain.
  2. 2.Open the Advanced DNS tab.
  3. 3.Click Add New Record, set the type, host and value, and save with the green tick.

Not listed? The steps are the same everywhere: find DNS or Manage DNS, add a record, pick the type, paste the name and value shown above.

Not sure if this is your problem?

Paste an email →Check your domain

Related fixes

You have no DMARC record. Here's how to publish one.

How to fix DMARC policy set to "monitor only" (p=none)