Hacker News Reader

I keep getting e-mails containing a ZIP file with subject lines like:

Dmarc Aggregate Report Domain: {mydomain.com} Submitter: {Amazon SES} Date: {2025-11-16}

From postmaster@amazonses.com

Nothing in the body, no idea idea what they are. I've always assumed malware, so left them untouched. But if anyone can enlighten me, I'd be grateful

View on HN

They're not zip files. They're gzipped XML files. Some shitty email programs will try to open them as ZIP files, fail, and then claim they're empty.

Amazon sends these when you or someone pretending to be you sends email to Amazon's domain.

They contain the DMARC report you asked for.

To add to jeroenhd's comment, if you're only sending mail from a single server (e.g., you are using a custom domain with Proton Mail, Zoho, etc.), then you probably don't need DMARC reports at all.

To avoid them, you can remove the `rua` or `ruf` tags from your DMARC DNS record.

Reply on news.ycombinator.com