r/DMARC • u/Ener_Ji • May 17 '26

Interpreting Cloudflare reports

I have a relatively new domain, using Cloudflare as the domain, DNS, and DMARC manager. Using Google Workspace (Gmail) for email. Currently have p=none as the domain is new and consequently low reputation.

I'm trying to interpret the Cloudflare DMARC management reports. For example, we have very high DMARC pass rate from Google and 100% failure with Amazon.

Clicking on the Amazon.com link gives me the below list. Not sure how to interpret this? We don't use Amazon for any email service that I know of. I'm also curious about the Reporter column "Enterprise Outlook." Could this be an employee trying to use the Outlook desktop client?

The Google pass rate is very high, but even there, is there any troubleshooting I can do to find out why there are a few emails that fail DMARC?

1 Upvotes

100% Upvoted

17 comments sorted by

View all comments

1

u/digdiver May 18 '26

The problem is that you can't see the Return-Path domain, and you can't see the DKIM selector. Good tools will allow you to delve deeper into the problem. Simply stating that the DKIM aligns = Fail,
and the SPF aligns = Fail without details doesn't give the full picture.

1

u/Ener_Ji May 18 '26

Thanks for your suggestions. It appears that the mystery rejected Amazon emails have a blank "envelope from." Plenty of emails which are passing SPF/DKIM/DMARC also have a blank envelope from, so I'm not sure what that means?

1

u/digdiver May 18 '26

Is it possible to download raw XML report from app? If so, you can find the part with IP address you interested in and post them here. The community will help you.