Overview
When a sending domain is verified with Amazon SES, email link tracking still uses an AWS-owned domain by default — which can cause spam filters to flag your campaigns. This guide explains how to configure your own domain for click tracking (iTrack) using the new step-by-step setup wizard, so tracked links use your domain instead of an AWS domain.
Contents
Before You Start
Identify Domains That Need iTrack Setup
Open the Tracking Domain Setup Wizard
Add the Required DNS Records
Verify the Configuration
Frequently Asked Questions
1. Before You Start
You will need:
Admin access to iCampaign (Settings → Sending Domains).
At least one sending domain that has already completed SES verification (shown as Domain verified in the domain list).
Access to your domain registrar's DNS management panel (e.g. GoDaddy, Namecheap, Cloudflare, or whichever provider hosts your domain's DNS records).
Access requirements: Any workspace user with permission to manage Sending Domains can complete this setup. If the Settings menu is not visible, contact your account administrator to grant the required role.
⚠️ Note: If you do not see the Settings → Sending Domains menu item, contact Dazos support to confirm the feature is enabled for your instance.
2. Identify Domains That Need iTrack Setup
Navigate to Settings → Sending Domains in the left sidebar.
Any domain that has completed SES verification but has not yet configured click tracking will show two badges side by side in the Status SES column:
Badge | Color | Meaning |
Domain verified | Green | SES verification is complete. |
itrack pending |
Amber | Click tracking is not yet configured. Links in campaigns still use the default AWS tracking domain. |
Domains that show only Domain verified (no amber badge) have already completed iTrack setup.
3. Open the Tracking Domain Setup Wizard
Click the amber itrack pending badge for the domain you want to configure. This opens the Tracking Domain Setup wizard for that domain.
The wizard shows the exact DNS records you need to add at your domain registrar, organized into numbered steps:
Step | Record Type | Purpose |
Step 4 |
CNAME | Routes tracked email links through your own domain (Click Tracking). |
Step 4b |
SSL (auto) | SSL certificate — provisioned automatically after CNAME is verified; no manual record needed. |
Step 5 |
MX | Configures your domain as the MAIL FROM address so Gmail doesn't show "via amazonses.com". |
Step 5 |
TXT (SPF) | SPF record for the MAIL FROM subdomain, improves deliverability. |
Each record shows a Pending or Verified status badge so you can track progress at a glance.
4. Add the Required DNS Records
Log in to your domain registrar's DNS management panel and add each record shown in the wizard.
For the Click Tracking CNAME (Step 4):
Create a new CNAME record.
Set the Name (or Hostname) to the value shown next to "Name:" in Step 4. Use the copy button to copy it without errors.
Set the Value (or Target / Points to) to the value shown next to "Value:" in Step 4. Use the copy button to copy it.
Save the record.
For the MAIL FROM MX record (Step 5 — MX):
Create a new MX record.
Set the Name, Priority, and Value to the values shown in Step 5. Use the copy buttons for each field.
Save the record.
For the MAIL FROM SPF record (Step 5 — TXT):
Create a new TXT record.
Set the Name and Value to the values shown in Step 5 (the TXT/SPF row).
Save the record.
💡 Tip: DNS propagation typically takes a few minutes but can take up to 24–48 hours depending on your DNS provider. If the first verification attempt fails, wait a few minutes and try again.
5. Verify the Configuration
After adding the DNS records at your registrar, return to the Tracking Domain Setup wizard in iCampaign and click the Check Status button (top-right of the page or bottom of the wizard).
iCampaign will check whether your CNAME record has propagated:
If the CNAME is verified: The page shows a green success message — "Your tracking domain has been successfully verified!" SSL certificate provisioning starts automatically in the background. The amber itrack pending badge disappears from the domain list.
If records are still pending: A modal dialog opens listing the specific DNS records that could not be confirmed. Review the list, make sure the records are saved correctly at your registrar, wait a few minutes for propagation, and click Check Status again.
⚠️ Important: The SSL certificate (Step 4b) is provisioned automatically once the CNAME is verified. You do not need to add any SSL record manually — the system handles it.
6. Frequently Asked Questions
Q: Will my existing campaigns break if I don't set up iTrack?
No. Campaigns continue to send and track clicks using the default AWS tracking domain. However, recipients may see the AWS domain in tracked links, which some spam filters treat as suspicious. Setting up iTrack improves deliverability.
Q: Why does Step 4b (SSL) say "SSL Pending" even after I verified the CNAME?
SSL provisioning runs as a background job and may take a few minutes to complete after the CNAME is verified. Refresh the page after a few minutes — the badge should update to "SSL Active" automatically.
Q: The amber itrack pending badge is still showing after I clicked Check Status successfully. What should I do?
Try refreshing the Sending Domains list page. If the badge persists, contact Dazos support with the domain name and reference ICD-1330.
Q: Do I need to complete iTrack setup for every domain?
Only domains you actively use for email campaigns need iTrack setup. Domains used for other purposes (DNS policy only, for example) do not require it.
Q: What happens if my DNS lookup fails temporarily when I click Check Status?
iCampaign will display an amber warning message asking you to try again. Your domain status is not changed, and no data is lost. Wait a minute and click Check Status again.
Q: Can I set up iTrack on a domain that is not yet SES-verified?
No. The itrack pending badge only appears after SES verification is complete. Complete SES verification first (the green Domain verified badge), then follow this guide.
Q: What records does iTrack add to SES on my behalf?
Once the CNAME is verified, iCampaign automatically configures Amazon SES to use your domain for MAIL FROM. This removes the "via amazonses.com" label that Gmail shows on emails sent through a shared sending domain.
Q: Who do I contact if I get stuck?
Contact Dazos support with the domain name, the step you reached, and reference ticket ICD-1330.
Need Help?
If you run into issues:
Check that the DNS records are saved correctly at your registrar — copy-paste each value exactly using the copy buttons in the wizard.
Wait a few minutes for DNS propagation and click Check Status again.
Contact Dazos support with the domain name, the last step completed, and reference ICD-1330.