3 ms·
I keep getting e-mails containing a ZIP file with subject lines like: Dmarc Aggregate Report Domain: {mydomain.com} Submitter: {Amazon SES} Date: {2025-11-16
by Angostura 11mo ago
I keep getting e-mails containing a ZIP file with subject lines like:
Dmarc Aggregate Report Domain: {mydomain.com} Submitter: {Amazon SES} Date: {2025-11-16}
From postmaster@amazonses.com
Nothing in the body, no idea idea what they are. I've always assumed malware, so left them untouched. But if anyone can enlighten me, I'd be grateful
- jeroenhd 11mo agoThey're not zip files. They're gzipped XML files. Some shitty email programs will try to open them as ZIP files, fail, and then claim they're empty. Amazon sends these when you or someone pretending to be you sends email to Amazon's domain. They contain the DMARC report you asked for.
- dnlzro 11mo agoTo add to jeroenhd's comment, if you're only sending mail from a single server (e.g., you are using a custom domain with Proton Mail, Zoho, etc.), then you probably don't need DMARC reports at all. To avoid them, you can remove the `rua` or `ruf` tags from your DMARC DNS record.