How to verify a sending domain
Add the DNS records Lumail shows so the sending identity can be verified and used as From.
You got is not verified for sending. The email system has not verified this identity. Mail from this domain can be delayed or rejected until it is.
What to add
Open Domains → the domain. Add every row that is not verified:
- Domain verification (TXT or CNAME — copy the page, don’t guess).
- SPF TXT on the apex / sending name, including
include:amazonses.com. - DKIM CNAMEs — How to fix DKIM.
- MAIL FROM MX + SPF on
ses.your-domain.com— How to fix MAIL FROM. - DMARC on
_dmarc— How to add DMARC.
Cloudflare: DNS-only (grey cloud) on these records. A proxied CNAME will fail verification.
Recheck
On the domain page, click Check that they are live. Propagation can take up to 48 hours. Lumail does not rewrite DNS.
Once the identity verifies, sending from that domain unlocks for that From address. See Account Verification if the org is still in limited mode.