A trusted sender is failing, or a result looks wrong
Not every red badge is a problem. Here are the two that confuse people most.
A sender I trust shows as failing
Forwarded mail almost always fails SPF, because the forwarding server's IP isn't in your SPF record. That's expected. What matters is DKIM: if the DKIM signature survives forwarding and aligns with your domain, DMARC still passes overall. Check the DKIM column in Sending Sources. If DKIM is also failing for a sender you use, that sender isn't signing, and you need to switch DKIM on in its settings.
A certificate shows expired but it's valid
A host that hasn't finished its first scan can briefly display a placeholder state. Re-run the scan in Certificate Monitor. If the wrong result persists, contact support with the hostname.
Still need a hand?
Email support@dmarcs.com, call +971 4 240 4441, or open a ticket from Support inside the app.