SPF
Which servers can send email as your domain.
- DNS lookups
- 4/10
v=spf1 include:spf1.amazon.com include:spf2.amazon.com include:amazonses.com -all
DKIM
Cryptographic signature proving message integrity.
- Selector
- zendesk1
v=DKIM1; p=
- •DKIM record has no public key ('p=' is empty) -- key may be revoked.
DMARC
Policy for handling messages that fail SPF/DKIM.
- Policy
- quarantine
- Reports
- Configured
- RUA
- reports@rua.getmailposture.com
v=DMARC1;p=quarantine;pct=100;rua=mailto:report@dmarc.amazon.com;ruf=mailto:report@dmarc.amazon.com
MX Records
Where mail for this domain is delivered.
- 5 amazon-smtp.amazon.com.
Recommended fixes
Ordered by severity. Copy the record, paste it at your DNS registrar, and re-scan.
Fix your DKIM record
highGenerate a new 2048-bit DKIM key from your email provider and replace the existing TXT record.
- 1Log in to your email provider's admin console.
- 2Regenerate the DKIM key using 2048-bit RSA (not 1024-bit).
- 3Update the TXT record at "zendesk1._domainkey.amazon.com".
DNS -> Records -> Add record -> Type: TXT -> Name: as specified -> Content: paste value -> Save.
Monitor amazon.com 24/7
Get instant email alerts the moment your SPF, DKIM, or DMARC records change or break -- before it costs you deliverability.
Start monitoringWhat is SPF?
SPF (Sender Policy Framework) is a DNS TXT record that lists which mail servers are authorized to send email on behalf of amazon.com. Receiving servers check the sending IP against this list; anything not listed can be rejected or marked as spam.
What is DKIM?
DKIM (DomainKeys Identified Mail) cryptographically signs outgoing messages from amazon.com, letting receiving servers verify the message wasn't altered in transit and genuinely came from an authorized sender.
What is DMARC?
DMARC ties SPF and DKIM together for amazon.com, defining what receiving servers should do when a message fails both checks -- and where to send aggregate reports so you can monitor abuse of your domain.