Valimail’s new Domain Report Card provides a clear, easy-to-read overview of your domain’s email security posture. This tool helps you quickly assess how well-protected your domain is against impersonation and highlights areas for improvement.
Note: The DMARC pass rate is calculated using data from the last 30 days. Other data points come directly from your live DNS records.
Domain Insights Section
This section breaks down key authentication details:
DMARC Record: Shows if your DMARC record is syntactically valid and whether it points to Valimail.
Healthy SPF: Confirms if your SPF record is under the 10 lookup limit.
DMARC Enforcement: Indicates whether your DMARC policy is set to reject or quarantine, protecting your domain from impersonation.
TLS: Confirms if TLS is pointed to Valimail.
Google, Microsoft, Yahoo Compliance: Checks for compliance with bulk sender guidelines.
API Access, Automated Config, BIMI, Service Auth, Microsoft/Google Integration: Shows additional features that can strengthen your email authentication ecosystem available in our paid packages.
Email Insights
Provides a summary of email traffic for your domain:
DMARC Policy: Reject, Quarantine, or None
Pass Rate: % of mail that passes DMARC
Total Volume: All email seen from your domain
Rejected / Failing: Number of emails that failed DMARC and were either rejected or flagged
Note: Some failing DMARC emails may be legitimate. You should validate and fix misconfigured sources.
Senders Insights
Valimail automatically identifies:
Possible Senders – Services that appear to send mail using your domain
Unaligned Senders – Services that aren’t properly authenticating, which can reduce your DMARC pass rate
SPF Lookup
Your SPF record is allowed up to 10 DNS lookups. If you exceed this, your SPF validation may break, causing delivery issues. This section tells you how close you are to the limit.
Suspicious Mail Map
This map shows where suspicious mail is originating, even if it’s not aligned. If your domain is not at enforcement (e.g., p=none or pct<100), these emails may still be delivered.
A warning message may appear if suspicious emails are bypassing enforcement.
These insights can help you track down unauthorized senders or misconfigured sources.
FAQ
Q: Why is my DMARC policy showing as none when I’ve configured it?
Check for pct=0, this disables enforcement when using p=quarantine and downgrades p=reject to Quarantine.
Q: What does “overly permissive SPF” mean?
If your SPF record includes +all or ?all, it allows unauthenticated sources to pass SPF, which weakens your protection.
Still Have Questions?
Contact Valimail Support for best practices or read our related articles on fixing SPF, DKIM, and DMARC records.