SETUP
Workspace or Microsoft 365, configured properly
Domain verification, mailboxes, aliases, groups and shared mailboxes, plus client setup across desktop and mobile. Done once, documented, and handed over.
MX 1 smtp.google.com
GOOGLE WORKSPACE · MICROSOFT 365 · DNS · SPF/DKIM/DMARC
Business email, set up properly —
and migrated without losing mail.
Google Workspace and Microsoft 365 setup, provider migrations, DNS cleanup, and the authentication layer underneath — configured once and verified against live mail.
Fixed quote before I start. Your mail keeps flowing during the move.
Show original — mx.google.comEXAMPLE
spfSOFTFAILsender not authorised
dkimNONEmessage not signed
dmarcFAILp=none, no policy
Example readout. Every job ends with this checked against live mail on your own domain.
WHAT CHANGED
What changed in email authentication
Feb 2024
Google and Yahoo began requiring SPF, DKIM and DMARC from bulk senders.
May 2025
Microsoft applied the same requirements to Outlook and Hotmail.
5,000/day
The bulk-sender threshold where those rules are enforced most strictly.
Mail that fails these checks is throttled, junked, or rejected outright. There is no warning email when it starts.
WHAT I DO
Email infrastructure, end to end
MIGRATION
Move providers without losing mail
Mailboxes, calendars and contacts moved across, a staged MX cutover outside your working hours, and verification that nothing was left behind. The old provider stays reachable throughout.
IMAP sync → 12,480 items → 0 errors
DNS & AUTH
The records underneath, cleaned up
Stale records removed, SPF kept under the ten-lookup limit, DKIM signed and switched on, DMARC staged to enforcement — then verified against real message headers.
_dmarc TXT v=DMARC1; p=none; rua=mailto:...
Most email problems trace back to DNS that was set up once, years ago, by someone who has since left.
START HERE
I'll check your domain before you pay anything
DNS is public. I can see how your mail is routed and what is wrong with it without any access to your accounts, and I'll tell you what I find whether or not you hire me. It takes about ten minutes.
- Where your mail currently routes, and whether the MX records agree with it
- Every authentication record you publish, and what each one is actually doing
- Stale, duplicate and conflicting DNS entries left behind by previous setups
- Whether your domain or sending IP appears on any major blacklist
- What a migration would involve, if you are considering one, and what it would cost
Microsoft and Outlook specifically
Microsoft inbox placement runs roughly ten points below the global average, and almost everyone tunes for Gmail because Google documents its tooling. Microsoft stamps its own verdict into the headers — the spam score, the bulk score, and the filtering reason. I read those directly rather than guessing from a checker tool.
What this does and does not do
Correct authentication improves the technical foundation of your sending. It does not override list quality, content, or sender reputation. I separate configuration errors from issues that need live deliverability testing, and I’ll tell you which one you have.
PRICING
Fixed prices for project work.
Setup and migrations are quoted before work starts. Ongoing support is hourly, with no retainer and no minimum.
START HERE
Authentication fix
$249
One domain. SPF, DKIM and DMARC audited, corrected and verified against live message headers.
- Every record written out: type, host, value, TTL
- SPF lookup count checked and kept under the limit
- DKIM signing confirmed on the actual sending platform
- DMARC staged from p=none with a dated enforcement schedule
- Live delivered message showing all three passing
- Written before-and-after handover
Setup
$350
A new Google Workspace or Microsoft 365 tenant, configured and documented.
- Domain verification and MX configuration
- Up to 10 mailboxes, aliases, groups and shared mailboxes
- SPF, DKIM and DMARC configured from the start
- Desktop and mobile client setup for your team
- Written handover documentation
Migration
From$600
Moving between providers, with mail flowing the whole way through.
- Mailboxes, calendars and contacts migrated across
- Staged MX cutover outside your working hours
- Old provider kept available as a fallback until verified
- Item counts reconciled so nothing is left behind
- Authentication rebuilt and verified on the new provider
Monitoring
$150/month
Authentication drifts. Someone adds a tool, a record gets overwritten.
- Records re-checked for drift and silent breakage
- Monthly DMARC report read and explained in plain English
- Blacklist monitoring across the major lists
- Direct line for anything urgent
- Cancel any time
Also available
- Additional domain$99same organisation, alongside an authentication fix
- Ongoing support$45/hourad-hoc admin and troubleshooting, no retainer, no minimum
- Agency partnerQuotedafter the first project, for agencies running client domains
Payment through Upwork or direct invoice. Project work quoted before it starts.
HOW IT RUNS
How it runs
- 01
Audit
I check where your mail routes now, what DNS you are publishing, and what is already broken. You get the findings whether or not you hire me.
- 02
Scope and quote
What is being set up or moved, when the cutover happens, and what it costs. Project work is never billed hourly.
- 03
Execute
Setup or migration runs with mail flowing throughout. The cutover is staged, and your old provider stays available as a fallback until the new one is verified.
- 04
Verify and hand over
Authentication checked against live message headers, every record documented, and admin access handed back to you.
Nothing here requires a call. If you'd prefer one, that's fine too.
WHAT YOU GET
Documentation, not just a message saying it is done
- Every record published, what it does, and where it lives
- Mail routing before and after, so the change is auditable
- Authentication verified against real message headers
- Admin accounts and licences, and who holds what
- Your DMARC enforcement schedule with real dates
- What to check first if something changes later
Four to six pages, yours to keep — enough for another administrator to pick up where I left off.
ABOUT
Aurova is run by one person: me, Adil.
I work at one specific layer of email — DNS, mail routing, and the authentication underneath it. SPF, DKIM, DMARC, MX, the records that decide whether a message is trusted. I came to it from building and running cold email infrastructure, where getting authentication wrong is expensive immediately and you learn fast.
I don't do copywriting, campaign strategy or list management. Those are real skills and they aren't mine, and a specialist who tells you what they don't do is worth more than a generalist who says yes to everything.
How I work: I diagnose first, in public DNS, before you pay anything. I send you records to paste in yourself rather than asking for your passwords. And I prove the result with a live delivered message showing SPF, DKIM and DMARC passing in the raw headers — not a screenshot of a checker tool, which proves nothing about whether mail actually arrives.
I’m based in Pakistan and work US and Canada business hours. That’s also why my rates are what they are.
QUESTIONS
The things people ask before hiring me
No. Mail is copied across first, not moved — your old mailboxes stay intact and reachable the entire time. The MX cutover happens at the end, usually outside working hours, and anything delivered during the switch is picked up in a final sync. If something looked wrong mid-move, the old provider is still there to fall back to.
In most cases I don't need any. I read your DNS publicly, then send you the exact records to add — type, host, value, TTL — and you paste them into your own registrar. No credentials change hands.
Where access is genuinely required — generating a DKIM key inside Google Workspace, or reading message trace in a Microsoft 365 tenant — I ask for delegated admin access under your own account rather than a shared password, or a screen share where you stay at the controls. If a password is unavoidable, send it through a password manager's share link, never in plain text over email or chat.
Access is revoked at sign-off. I'll remind you to do it if you forget. Happy to sign an NDA before any of this starts.
A single mailbox is usually same-day. Ten to twenty mailboxes typically run across two to three days, most of which is unattended syncing rather than anything you need to sit through. The part that actually affects your team — the cutover — is under an hour.
It depends on what your team already lives in. If that is Excel, Teams and Office documents, Microsoft 365 is the lower-friction choice. If it is Docs, Drive and Meet, Workspace is. I will give you a straight recommendation for your situation rather than a preference, and set up whichever you choose.
It comes with you. Mail, folder structure, calendars and contacts are migrated across. Archives can either be brought into the new tenant or exported to file if you would rather keep them outside it. Nothing is deleted from your old provider by me.
Yes, hourly, with no retainer. Most clients need a few hours in the first month and very little after that. You get full documentation of the setup either way, so another administrator could pick it up without me.
FREE AUDIT
Send me a domain. I'll tell you what's wrong with it.
No cost and no obligation. You'll get the findings whether or not you decide to hire me — worst case you learn something about your own setup.
Replies Mon–Sat, usually within a few hours, on US and Canada business hours.
adil@aurovaglobal.com