Email Deliverability
magentaku.id
78%
B71 / 90 points
1
MX hosts
8
MX IPs
0
Blacklisted
2
No PTR
2
No FCrDNS
Issues (7)
highDMARC policy is none (monitor only)
p=none provides visibility but no protection. Spoofed mail still passes through to inboxes. Move to quarantine once you've verified legitimate senders are authenticated.
→ Once DMARC aggregate reports show your legitimate mail aligned, upgrade to p=quarantine, then to p=reject.
highMX IP 52.101.137.2 has no PTR (reverse DNS)
Gmail and Microsoft both require reverse DNS on sending IPs. Without it, mail from this host is almost always rejected or spam-foldered.
→ Add a PTR record at your hosting provider. For cloud MTAs (AWS SES, Mailgun, etc.) this is managed by the provider.
highMX IP 2a01:111:f403:cc09::1 has no PTR (reverse DNS)
Gmail and Microsoft both require reverse DNS on sending IPs. Without it, mail from this host is almost always rejected or spam-foldered.
→ Add a PTR record at your hosting provider. For cloud MTAs (AWS SES, Mailgun, etc.) this is managed by the provider.
mediumSPF uses ~all (softfail) instead of -all (hardfail)
Softfail still lets mailbox providers accept unauthorized senders. Upgrade to -all once you're confident all legitimate senders are covered.
→ Replace ~all with -all in your SPF record.
lowOnly one MX host
Single MX means any outage or block at that host results in mail loss or bounces. Industry best practice is at least two MX records at different hosts.
→ Add a secondary MX at a different provider or a backup MX service.
infoDKIM could not be verified
We checked common selectors (default, google, selector1/2, mail, etc.) and found none. This is normal for providers that use custom selectors (Amazon SES, Fastmail) — DKIM may be working fine. It is NOT scored against you.
→ Confirm DKIM is set up with your mail provider. If you know the selector, you can verify it directly on the email-auth page.
infoBlocklist status unknown for 4 MX IP(s)
2a01:111:f403:cc09::, 2a01:111:f403:cc09::1, 2a01:111:f403:cc1f::4, 2a01:111:f403:cc1a::8: no blocklist answered for these addresses (our queries failed, or the address is IPv6, which these IP blocklists don't cover). They are left out of the reputation score, neither clean nor listed.