Consultation/audit: Domain reputation recovery for e-commerce and DMARC Alignment setup

Budget: 12000 UAH Deadline: 4 days

We can take a technical audit of the deliverability and architecture of the email flow. For the budget, I would allocate 12,000 UAH and 3-4 working days to analyze DNS, SPF, DKIM, DMARC, eSputnik, transactional emails from Goodshop, and options to normalize dmarc=fail.

Look, there’s a nuance - the DMARC Alignment Fail at Goodshop is likely not fixable with just a nice DNS record. We need to understand if we can redirect the transactional flow to an external SMTP with your domain's signature, or separate the flows by subdomains, or change the From scheme and DKIM. I would keep it simple - first, we check the actual email headers, then we choose the option with minimal risk for orders and reputation.

> In the end, I will provide a clear scheme - which records to change, which services to use, how to separate bulk and transactional emails, how to go from p=none to p=quarantine without losing important emails.
> I will also provide a warming and recovery schedule for eSputnik - without magic, because email reputation loves discipline, not shamanism =)

Let me clarify two things.
> Is there access to Google Postmaster Tools, Cloudflare DNS at Goodshop and eSputnik, or do we need to work with screenshots and exports?
> Can you provide 2-3 sources of problematic transactional emails with full headers showing dmarc=fail?

Similar cases of systemic work from Ingello
> https://business.ingello.com/prime-eva - e-commerce and systemic integration of processes for retail
> https://business.ingello.com/eva - complex e-commerce infrastructure and work with business processes
> https://business.ingello.com/vorfahr - automation and linking of external services, where it’s important not just to connect a service, but to build a sustainable architecture

The main page for our approach to projects from the marketplace - https://systems-fl.ingello.com

In terms of format - to avoid risking accounts on the marketplace, we will start with a written audit and architecture of the solution within the project. After a short design phase, we can agree on an acceptable format for discussion as required by the marketplace. Overall, it’s fine, the main thing is not to guess with MXToolbox, but to gather facts and carefully lift the domain from Low/Medium. Expand

Budget: 9000 UAH Deadline: 3 days

I already have a nearly ready scheme for such an audit, it can be quickly adapted for Khoroshop, eSputnik, and your domain; we can discuss it in the project, I’m available =)

Regarding the call, there’s a nuance... external contacts cannot be made before the project opens - the marketplace may ban us. We can conduct the audit and consultation within the project, and after the start, agree on an acceptable format of communication according to the platform's rules.

So, it’s more like this - if Khoroshop signs DKIM with its technical domain and doesn’t provide a custom DKIM or aligned MAIL FROM, then dmarc fail cannot be fixed normally with just one DNS record. Options are to get a custom signature from Khoroshop, route the transactional flow through a third-party SMTP with a signature from your domain or subdomain, or change the From for this flow. I would do it simpler - first check all senders and alignment, then choose the most reliable route without losing emails.

In 3 days, I will provide an audit of SPF, DKIM, DMARC, a scheme for transactional and bulk flows, recommendations on p=none - p=quarantine, a detailed warming plan for eSputnik, and a risk table for services in Ukraine. The assessment for this stage is 9000 UAH.

I’ll clarify 2 points to avoid guessing:
> Is there access to DNS in Cloudflare for Khoroshop and to Google Postmaster Tools?
> Are there currently DMARC rua-reports and what are the daily email volumes for Khoroshop and eSputnik?

Similar projects and experience:
> https://business.ingello.com/eva - online store and system processes around the store
> https://business.ingello.com/prime-eva - retail, accounting, integrations, and operational logic
> https://business.ingello.com/vorfahr - automation of online store processes and careful work with several services

The main profile of Ingello for the marketplace - https://systems-fl.ingello.com

!!Main risk!! - do not switch DMARC to quarantine until it is clear that all legitimate flows pass alignment. Otherwise, you could shoot yourself in the foot beautifully, and it seems there is only one for the domain. Expand

Budget: 12000 UAH Deadline: 7 days

Hello. The issue is clear — you have a DMARC Alignment Fail on the transactional flow of Khoroshop because emails from their subsystem are signed with their technical domain while your domain is in the From field. This is a classic and solvable case. I will explain how I see the solution.

The main fix is to move the transactional flow from Khoroshop's infrastructure to a third-party SMTP, where you can set up DKIM signing from your domain and thus resolve the Alignment issue. Candidates for the Ukrainian market include: AWS SES (the cheapest for volumes, but requires warming up a new reputation from scratch), eSputnik Transactional API (if they have a separate product for transactionals and they sign with your DKIM — the smoothest path, but needs to be verified personally), Postmark (great reputation for transactions, more expensive), Mailgun (a workable middle ground). I will discuss the pros/cons and costs for your volumes during the call.

I will conduct a DNS audit of SPF/DKIM/DMARC — I will go through the records using MXToolbox and Google Postmaster, check that SPF does not exceed 10 lookups, that the DKIM key is of the correct length, and that DMARC is correctly configured with rua/ruf. Regarding the transition from p=none to p=quarantine — migrating without auditing current errors is risky, I will provide a plan for phased migration through subdomain policy or through gradual pct percentage with report monitoring.

For warming up after a reputation drop — the schedule depends on the current metrics in Postmaster (Low/Medium clearly indicate only the direction, but not the volume that is safe to send). Before the call, it would be helpful to have screenshots of Domain Reputation for the last month and an example of the headers of a transactional email from Khoroshop — this will allow us to see the Alignment error in detail right away.

A convenient format would be a call lasting 60-90 minutes with a breakdown plus a written summary with recommendations and the architecture of the solution.

Budget: 12000 UAH Deadline: 10 days

Good day! I design and develop online stores and marketplaces on Laravel — personal accounts, payment gateways (LiqPay/Stripe), logistics automation. The cost starts from 12,000 UAH. Portfolio: www.engine-web.od.ua/