Skip to content
whois.me.uk
Menu
Sign in

DMARC report monitoring

Receivers already send you a daily XML report about every source using your domain. Send those reports to us instead and read a dashboard: who sends as you, what passes SPF and DKIM, what was quarantined, and who is spoofing you.

Start free Sign in Free for one domain, 30 days of history, no card.

Three steps

  1. 1. Verify your domain

    Add one TXT record under Account › Domains. Reports are only ever shown to the verified owner.

  2. 2. Point rua at us

    Add rua=mailto:dmarc@whois.me.uk to _dmarc.yourdomain, or keep your own address too with a comma-separated list. The DMARC builder writes the full record.

  3. 3. Read the dashboard

    Google, Microsoft, Yahoo and the rest each send one report a day. Within 24 hours you see every source with its reverse DNS and provider, its SPF and DKIM alignment, the dispositions applied and a daily chart. Findings tell you which sources need DKIM, which are spoofing, and when you are ready to move to quarantine and reject.

What you get

  • Every source sending as your domain, aggregated across receivers, with reverse DNS and provider
  • SPF and DKIM alignment per source, with the domains that passed
  • Dispositions receivers applied: none, quarantine, reject
  • A daily chart of volume and pass rate over 7, 30, 90 or 365 days
  • Findings with fix guides: failing sources, spoofing, ready to tighten
  • CSV and JSON export, and the same summary from /api/v1/dmarc/{domain}
  • Subdomain reports roll up to the parent domain

Questions

Is it free?
Yes for one verified domain with 30 days of history. Pro keeps a year for five domains, Business three years for fifty. Plans.
Do I need to authorise whois.me.uk to receive reports for my domain?
No. When the report address is on another domain, receivers look for yourdomain._report._dmarc.whois.me.uk. We publish it as a wildcard, so every domain is already authorised.
What happens to reports for a domain nobody has verified?
They are kept for 7 days so you do not lose the first week while you verify, then deleted. They are never shown to anyone but the verified owner.
I only have a few old report files.
Use the DMARC report analyser: upload XML, zip or gz and read the same breakdown once, with nothing stored.