icloud.com
1 fix stands between this domain and a clean A. 1 item below, ordered by how much inbox it is costing you.
Fix these, in this order
ranked by impactEither DKIM signing is off, or it uses a selector we did not probe. Without DKIM, forwarded mail and anything that breaks SPF fails DMARC.
Do this: turn on DKIM at your mail provider and at every third-party sender, then add the selector names when monitoring so they are verified daily. If DKIM is already on with an uncommon selector, add it to the check.
Records found
10 mx02.mail.icloud.com
Grade history
SPF OK
v=spf1 redirect=_spf.icloud.com
- DNS lookups
- 4 of 10 allowed
- Final mechanism
~all
- OK No problems detected.
Include tree
4 / 10DKIM Not found
DKIM selectors cannot be listed from DNS, so 79 selectors used by common providers were probed. "Not found" means none of those selectors exist; the domain may still sign with a custom selector.
- WarningNo DKIM key found under 79 common selectors. If you know your selector, add it to the check; if you have no DKIM at all, enable it at your mail provider.
DMARC OK
v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:d@rua.agari.com; ruf=mailto:d@ruf.agari.com
- Policy
p=quarantine· subdomainssp=quarantine- Applies to
- 100% of failing mail
- Aggregate reports
mailto:d@rua.agari.com
- NotePolicy is p=quarantine. p=reject is the strongest protection once you are confident all senders are aligned.
Mail exchange and extras
- OK No problems detected.
- MTA-STS
- Not published optional: enforces TLS for inbound mail
- TLS-RPT
- Not published
- BIMI
- OK
v=BIMI1; l=; a=;
How the grade is calculated
Score 70/100. SPF present and valid. SPF ends with ~all. DMARC present and valid. DMARC policy is quarantine. DMARC aggregate reporting enabled. SPF contributes up to 35 points, DKIM up to 25, DMARC up to 40 (policy strength and reporting). Any critical issue caps the grade at C. Lookups that failed are shown as "not measured" and never counted as missing.
Check another domain:
Other recently graded domains
Public checks from the last few days. Every report is re-measured from DNS when opened.