How long does it take for the reports to appear in DMARC Analyzer?

The first step to start implementing DMARC is to update your DNS record as instructed by our setup. However you may not directly see results in the tool. ISPs (/ DMARC report senders) may cache the results of the DNS records for up to 72 hours (independent of the TTL of your DNS records). So, …

What is alignment?

DMARC is all about verifying that the address in the ‘From’ header is the actual sender of the message. To achieve this, the technical settings to verify senders DKIM and SPF are used. However, both DKIM and SPF do not require the From header and the user identity for either DKIM or SPF to match. …

What is an Organizational Domain?

While implementing DMARC you will probably see the term ‘Organizational Domain’. This basically is your main domain combined with the domain extension. Examples: rep.dmarcanalyzer.com => dmarcanalyzer.com yourdomain.com => yourdomain.com yourdomain.co.uk => yourdomain.co.uk subdomain.yourdomain.com.au => yourdomain.com.au

What to do with sources failing the DMARC checks?

In this article we will cover what to do if you find sources failing the DMARC checks. You can find these sources in the per sending overview of the ‘DMARC aggregate reports’ section. Why is a source marked as failed? The reason a source is marked as failed, is because the email(s) from this source …

How to start deploying DMARC in 5 easy steps

Deploying DMARC can be a difficult process. DMARC Analyzer provides a SaaS solution which empowers organisations to easily manage complex DMARC deployment. In this article you will learn how to deploy DMARC in 5 easy steps. 1. Identify all your companies domains Investigating all your company owned domains is the first step of your DMARC …

What is spoofing?

Email spoofing is the forgery of an emailheader. This so that the receiver of the message thinks that the sender originated from someone or somewhere other than the actual source. Spoofing through email is an often used tactic for phishing- and spam campagnes. People will open an email more often when they think it has …

How to remove a domain from your account?

In this article we will cover how you can remove a domain from your account. How to remove a domain? First step to take when removing a domain from the DMARC Analyzer Suite, is to remove the DMARC record that points to DMARC Analyzer. When the record is removed or points to another email address …

What does the SPF failure mean?

When aligning sources in DMARC Analyzer it’s possible that you will see several failures. But what do all these failures mean? Below we created a legenda with all possible failures. SPF SPF records can contain multiple ‘mechanisms’. These are parts of the SPF record while describe (a set of) valid sending IP addresses for this …

How should I setup parked/inactive domains?

Most companies have a set of active domains which they use to send mail from. However most of the time there are also parked (or inactive) domains. These are domains which have been registered by a customer, but which are not used to send email or host a website. This can be ‘typo domains’ or …

What is forwarding within DMARC?

Forwarding is a bit of an edge case within DMARC. Forwarding happens when an email receiver forwards your email to another recipient. Log in on app.dmarcanalyzer.com and go to “DMARC aggregate reports” → “Per sending source” to see detailed statistics about your forwarded emails. There are two types of forwarding: 1. Manual forwarding Manual forwarding …

5 common mistakes to avoid when deploying DMARC

Deploying DMARC can be an overwhelming and complicated process. In this article we will cover the 5 common mistakes to avoid when deploying DMARC. 1. Not setting up parked (inactive) domains All companies implement DMARC for their active domains. However most companies also have parked (inactive) domains and do not implement DMARC for them. Not …

How to approach vendors with DMARC related questions?

Deploying DMARC for all domains can be a hard process. During this process a lot of sources need to be set up correctly in order to send DMARC compliant email. Some sources have documentation available on how to let their emails become DMARC compliant. However most sources do not and therefore it can be difficult …

What does DMARC compliant mean?

In this blog article we will cover what DMARC compliance is and how to become DMARC compliant. In order to fully implement DMARC, being DMARC compliant is key. What is DMARC compliance? With DMARC it is possible to gain full insight on your email channel, choose from three different DMARC policies and protect your domains …

Customer Journey within DMARC Analyzer

Below you will see an overview of all the stages taken during the Customer Journey within DMARC Analyzer. DMARC Analyzer recognizes these stages for a DMARC deployment project. The stages are also followed when the DMARC Analyzer staff provides managed service to guide clients through a DMARC deployment project. It’s clarified what to expect during …

What is Storage spoofing?

Cybercrime is becoming more and more ingenious by the day. One of the latest forms of phishing attempts, we came across at one of the world’s busiest harbours, shows that even storage facilities aren’t safe when it comes to cybercrime and phishing attacks. Storage spoofing attacks are mainly aimed at national and multinational companies that …