The detail view lets you inspect individual DMARC records and run diagnostic checks to understand exactly why emails are passing or failing authentication.
Opening the detail view
From the DMARC dashboard source table, click on any source or date row to open the DMARC records drawer. This shows a table of all individual records for that scope. From there, click the three-dot menu on any row and select View detail to open the full diagnostic view.
DMARC records drawer
The DMARC records drawer shows a paginated table of all records matching the source and date range you selected. Each row shows:
- Email count, date, source, and reporter
- Visible from domain and return path
- IP address with country flag
- Delivery status and DMARC compliance
- SPF and DKIM results with alignment
You can filter the records by reporter, SPF status, DKIM status, delivery status, DMARC compliance, envelope to, source, visible from, return path, and IP address. You can also download the filtered data as a CSV file.
Diagnostic checks
The detail view runs live DNS lookups and compares them against the record data to identify issues. Checks are grouped into four sections, each with a status icon showing whether all checks passed, or if there are warnings or errors. Sections with errors are expanded automatically so you can see what needs attention.
SPF checks
- SPF record found - Verifies an SPF record exists at the return path domain.
- Single SPF record - Checks there is only one SPF record (multiple records cause failures).
- Valid SPF record - Validates the SPF record syntax.
- Within 10 SPF lookup limit - Confirms the SPF record does not exceed the DNS lookup limit.
- Sending IP authorized - Checks whether the sending IP is included in the SPF record.
- SPF domains aligned - Verifies the return path and visible from domains are aligned.
DKIM checks
- Aligned DKIM signature - Checks the email was signed with a DKIM signature matching the visible from domain.
- DKIM record found - Verifies DNS records exist for the DKIM selectors.
- Single DKIM record - Checks there are no duplicate DKIM records.
- DKIM record valid - Validates the DKIM record syntax and key.
- DKIM pass - Confirms the DKIM signature verification passed.
DMARC checks
- DMARC record found - Verifies a DMARC record exists for the visible from domain.
- Single record found - Checks there is only one DMARC record.
- Valid DMARC record - Validates the DMARC record syntax.
- Suped mailto configured - Checks the Suped reporting address is in the DMARC record.
- Delivered - Shows whether the email was delivered or rejected based on DMARC policy.
Reverse DNS (rDNS)
- rDNS configured - Checks whether the sending IP has a reverse DNS record. This is not strictly required for DMARC but is important for deliverability and bulk sender compliance.
Data panel
The right side of the detail view shows a summary of the record data including email count, date, source, reporter, visible from, return path, IP address with country, envelope to, delivery status, DMARC compliance, and SPF/DKIM results with alignment.
DNS records
Each section also shows the actual DNS records that were looked up, including SPF records, DKIM records with selectors, and the raw DMARC record. This makes it easy to spot exactly what is misconfigured without leaving Suped.
