Add a DMARC reporting address

dmarc-no-aggregate

Without a rua address you get no aggregate reports, so you cannot see who is sending as you or safely tighten the policy. Add a reporting mailbox.

Why this matters

Your DMARC record doesn't include a reporting address (rua=). You won't get notified when someone fails authentication sending on your behalf.

Your stack

CDN and edge

Cloudflare

1 Go to DNS > Records
2 Edit your _dmarc TXT record to add an rua= tag with your reporting email

Type: TXT
Name: _dmarc
Content: v=DMARC1; p=reject; rua=mailto:[email protected]

# rua= receives aggregate XML reports from receiving servers
# Use a dedicated mailbox or a DMARC report service

Cloudflare docs

Does your app still have this?

Scan your domain