Email Security & DMARC Monitoring
Is someone sending spam using your domain? Without DMARC monitoring you'll never know. I set up SPF, DKIM and DMARC, monitor your reports and show you who is abusing your domain.
- Set up SPF, DKIM & DMARC correctly.
- 16+ years of experience
- Ongoing Monitoring
- Based in Switzerland
Check email security
Free – results in seconds
Activate DMARC monitoring
Find out if someone is abusing your domain for spam. Add this DNS record:
Receive report by email:
No data is stored. Purely technical DNS check.
The Problem
Do you know who is sending emails on behalf of your domain?
Domain Spoofing
Attackers send spam and phishing emails using your domain as the sender. Your customers receive fake invoices or links – and think they come from you.
Emails land in spam
Without correct SPF, DKIM and DMARC records, Gmail, Outlook & Co. flag your genuine emails as suspicious. Important messages never arrive.
No visibility
Without DMARC reports you don't know if someone is abusing your domain. You only find out when customers complain – or your domain lands on a blacklist.
Complicated DNS records
SPF, DKIM, DMARC – it sounds technical, and it is. Misconfigured, you block your own emails. Configured correctly, you're protected.
The Solution
Email authentication – your shield against spoofing
Three DNS records protect your domain: SPF defines who may send. DKIM signs every email cryptographically. DMARC tells recipients what to do with forged emails.
SPF – Who may send?
An SPF record lists all servers authorised to send emails on behalf of your domain. Everything else is rejected.
DKIM – Is the email genuine?
DKIM adds a cryptographic signature to every outgoing email. The recipient can verify whether the email was altered in transit.
DMARC – What happens to forgeries?
DMARC combines SPF and DKIM and defines a policy: should forged emails be delivered, moved to spam, or rejected? And you receive reports about it.
DMARC Monitoring
Who is sending emails with your domain?
DMARC reports show you exactly which servers are sending emails on behalf of your domain – legitimately or not. Without monitoring, these reports go unread.
_dmarc.deine-domain.ch TXT
"v=DMARC1; p=none; pct=100; rua=mailto:[email protected]; sp=none; aspf=r;"
How the monitoring works
You add my report address to your DMARC record. I receive and analyse the daily reports from all major email providers (Google, Microsoft, Yahoo etc.) and notify you of any anomalies.
- Set DMARC record – with my address as report recipient (rua)
- Collect reports – all major providers send daily reports
- Analysis & evaluation – I check who is sending on behalf of your domain
- Monthly report – you receive a clear, easy-to-understand summary
- Recommendations – I tell you what needs to be adjusted
Services
What I take care of for you
SPF setup
Identify all legitimate sending servers (hosting, newsletter tool, CRM etc.) and configure the DNS correctly.
DKIM configuration
Set up cryptographic signatures for outgoing emails – at your hosting provider and all sending services.
DMARC policy
Gradually move from p=none through p=quarantine to p=reject – without blocking your genuine emails.
DMARC monitoring
Ongoing monitoring of DMARC reports. You'll know immediately if someone abuses your domain for spam.
Blacklist check
Regular checks whether your domain or IP is on spam blacklists – plus help with delisting.
Monthly reports
Clear summary: who sent emails, what was blocked, what needs adjusting.
Comparison
Why professional email monitoring?
Many ignore DMARC reports or haven't set them up at all. Free tools only show the current state – no monitoring, no actionable recommendations.
| WebAufbau Service | DIY | Nothing configured | |
|---|---|---|---|
| SPF correct | Fully verified | Often incomplete | Usually missing |
| DKIM active | All services | Partial | Not present |
| DMARC policy | Up to p=reject | Often only p=none | Not present |
| Ongoing monitoring | Yes, ongoing | Manual, rarely | No |
| Clear reports | Monthly | Raw XML data | No |
| Actionable recommendations | Yes, specific | No | No |
| Blacklist monitoring | Yes | Manual | No |
Looking for website protection too?
DDoS defence, bot filtering and login protection – GDPR-compliant with European servers.
The Process
Secure email domain in 4 steps
Email check
I check your domain for SPF, DKIM and DMARC – free of charge. You'll see immediately where the gaps are.
Setup
Configure SPF, DKIM and DMARC correctly. Register all sending services. Activate DMARC monitoring.
Observe
First weeks with p=none: collect reports, analyse, identify legitimate sources.
Enforce
Gradually tighten the policy to p=reject. Your domain is protected, forged emails are rejected.
FAQ
Frequently asked questions about email security
What is DMARC and why do I need it?
My emails land in spam – does DMARC help?
What are DMARC reports?
Could I block my own emails?
Do I need to change my hosting or email provider?
What does it cost?
I use various sending services (newsletter, CRM etc.) – is that supported?
How do I find out if my domain is being abused?
Is someone sending spam using your domain?
Find out – with a free email check. I'll verify SPF, DKIM and DMARC and show you where you're vulnerable.