DomainSafePro Setup and manage your email protection
Not signed in

Loading...

Checking your authentication status

DomainSafePro
🎉

Payment Successful!

Log in with Google to activate your subscription and protect your first domain.

Welcome Back

Sign in with your Google account to set up protection for your domain and manage your email security.

You will be redirected back here after signing in.

Where Is Your DNS Hosted?

Your domain's DNS is managed by one provider. Select yours below to get started.

Cloudflare

I manage my DNS through Cloudflare.

Automatic Setup

AWS Route 53

I manage my DNS through AWS.

Automatic Setup

Other Provider

GoDaddy, Namecheap, Google Domains, or another registrar.

Copy-Paste Setup

Connect Your Cloudflare Account

Paste your Cloudflare API token below and we will automatically configure all your email security records.

How to get your API Token:
1 Log in to Cloudflare Dashboard → API Tokens
2 Click "Create Token"
3 Select the "Edit zone DNS" template
4 Under "Zone Resources", select your domain(s) — leave other fields as default
5 Click "Continue to summary" → "Create Token" → Copy the token
Note: You need an API Token, not the "Global API Key" or "Zone ID" 
Paste your API token and click "Load My Domains" to get started.

Connect Your AWS Account

Enter your AWS IAM credentials below and we will automatically configure all your email security records.

How to get your IAM credentials:
1 Log in to AWS Console → IAM
2 Go to "Users" → Create a new user (or use existing)
3 Click "Add permissions" → "Attach policies directly"
4 Search for and select "AmazonRoute53FullAccess"
5 Go to user's "Security credentials" tab → "Create access key"
6 Select "Third-party service" → Create → Copy both keys
Note: Use an IAM user, not your root account. The Secret Key is shown only once — save it! 
Enter your AWS credentials. Zones will load automatically.

📋 Step 1: Get Your DNS Records

Enter your domain below and we will generate the DNS records you need. Then copy each record and add it at your domain registrar.

Verify Verify Your Setup

Check if your domain's email protection is configured correctly. We will test each record and tell you if anything needs attention.

Help Need Help?

Not sure which DNS provider you use?

Your DNS is typically managed by whoever you registered your domain with (like GoDaddy, Namecheap), or by a service you pointed your nameservers to (like Cloudflare or AWS). Check your domain registrar's settings if unsure.

Already protected but showing errors?

If you set up protection through Cloudflare or Route 53 but verification shows issues, wait a few minutes for DNS to propagate and try again.

Insights Email Authentication Insights

See how well your outgoing emails are authenticating. Higher alignment means better protection against impersonation.

Analyze
Ready to analyze your domain
Enter your domain name above and select a time range to see how well your emails are authenticating.
Tip: Start with "Last 30 Days" for a comprehensive view
View raw API response 
—

Who's Sending As Your Domain

See every server that has sent email claiming to be from your domain. Identify legitimate senders vs potential impersonators.

Source
Source analysis ready
Click a button above to see which servers have been sending email as your domain.
We'll show you authorized senders, partial matches, and any suspicious activity.
View raw sources API response 
—

🔧 Admin Tools

Show admin tools ▼
📊 Connected Domains

Domain Health Dashboard

All domains under your account with their current protection status. The robot checks these automatically every day.

Domain Owner SPF DMARC DKIM s1 DKIM s2 Checked
Loading domain status...
➕ Register Domain

Add Domain to Monitoring

Register a new domain with the robot. We will start tracking its email security status automatically.

Enter domain details above.
View registered domains
Loading...
📈 DMARC Policy Step-Up

Adjust DMARC Policy

Progress from monitoring (p=none) to quarantine to full rejection. Start safe, then tighten as alignment improves.

Use Preview to see the generated DMARC record, then Apply via your DNS provider.
🛠️ Control SPF (Central Include)

SPF Sender Builder

Select authorized email senders and update _spf.control.domainsafepro.com. All protected domains inherit this central include automatically.

Select senders above, then click "Update Control SPF" to apply.
📥 Report Ingestion

DMARC Report Pipeline

DMARC aggregate reports are processed automatically. The Robot's /ingest/daily endpoint receives parsed data from the ingestion pipeline.

How it works

Email providers (Google, Microsoft, etc.) send DMARC aggregate reports to the rua address. A background job parses these XMLs and pushes daily summaries to the Robot, which stores them in the dmarc_daily table.

Manual ingestion

To manually push data, send a POST to /ingest/daily with the x-ingest-key header:

{
  "domain": "example.com",
  "date": "2025-01-15",
  "total": 1234,
  "aligned": 1200,
  "spf_aligned": 1180,
  "dkim_aligned": 1195
}
🔔 Alerts

Slack Notifications

Test the alert system and flush any queued notifications.

—
🔍 API Diagnostics

Test API Endpoints

Check which endpoints are reachable. This helps diagnose "Failed to fetch" errors.

Click "Test All Endpoints" to check API connectivity.