salesforce.com
84/100
Mail provider: Unknown
| Check | Details | |
|---|---|---|
| MX | ✔ | mxa-00177002.gslb.pphosted.com, mxb-00177002.gslb.pphosted.com |
| SPF | ✔ | v=spf1 include:_spf.google.com include:_spf.salesforce.com exists:%{i}._spf.corp.salesforce.com ~all (4 lookups); ~all (softfail) - fine with DMARC; -all is stricter |
| DKIM | ⚠ | Selectors found: google (1024-bit), s1 (2048-bit+), s2 (1024-bit), mandrill (1024-bit), 200608 (1024-bit); upgrade 1024-bit keys to 2048-bit |
| DMARC | ✔ | v=DMARC1;p=reject;fo=1:d:s;pct=100;rua=mailto:dmarc_agg@vali.email,mailto:0e5a5c34@inbox.ondmarc.com;ruf=mailto:0e5a5c34@inbox.ondmarc.com |
| MTA-STS | ⚠ | Not set (optional; enforces TLS for mail sent to you) |
| TLS-RPT | ⚠ | Not set (optional; reports TLS delivery failures) |
| BIMI | ✔ | v=BIMI1; l=https://www.salesforce.com/content/dam/web/en_us/www/images/home/bimi-salesforce-logo.svg; |
How to fix it
- No DNS changes needed. 🎉
DNS changes can take up to 24–48 hours. Re-run the check afterwards.
Want it fixed for you? I set up SPF, DKIM and DMARC without breaking your other senders,
with a before/after report.
Get it fixed on Fiverr
Get it fixed on Fiverr
Prefer to do it yourself? Get the step-by-step Fix Kit ($15) – 19-page guide, checklist, 20+ providers.