Deliverability insights

Page 2 of 14.

·8 min readdmarcsecurityspoofing2026

234,559 Domains Publish DMARC and Enforce Nothing: The p=none Illusion

234,559 of 459,124 top-1M DMARC records — 51% — sit at p=none, monitoring without enforcement. What attackers read into it and the staged path to reject.

Read article →
·8 min readsecurityemail-gatewayproofpointmimecast

Proofpoint and Mimecast Are Eating the Enterprise Email Perimeter

Proofpoint's MX footprint roughly doubled since 2022 (0.86%→1.91%) and Mimecast grew to 1.53%. What gateway consolidation means for admins and senders.

Read article →
·7 min readdmarcsecuritysubdomains

Your Apex Is Protected, Your Subdomains Are Not: The sp= Gap

A p=reject apex can hide an sp=none tag that exempts every subdomain from DMARC enforcement. How the gap appears, what attackers do with it, how to close it.

Read article →
·7 min readsecurityspfphishingsaas

KnowBe4 in Your SPF: Phishing-Training Adoption as a Security-Maturity Signal

KnowBe4 appears in 0.56% of top-1M SPF records, 2.8× more than in 2022. Why phishing-training adoption is readable in DNS and what the signal really means.

Read article →
·7 min readdmarcsecurityruavendors

DMARC Report Addresses Leak Your Security Vendor: The rua= Market

The rua= address in a public DMARC record names your monitoring vendor — Valimail, dmarcian, EasyDMARC and peers. What it discloses and how to audit the loop.

Read article →
·10 min readresearchmxdmarc2026

A Decade of Email Consolidation, Charted: 2016–2026 in 192 DNS Snapshots

Ten years of DNS data: self-hosted email halved to 22.53%, Google and Microsoft reached 38.4%, and Amazon SES became the #1 ESP.

Read article →
·8 min readresearchmxconsolidation2026

What Happens When Two Companies Hold 38% of the World's Business Email?

Google and Microsoft now receive mail for 38.4% of top domains. Filters as private regulation, outage blast radius, and the case for calm.

Read article →
·7 min readresearchmxdnscuriosities

The Weirdest MX Records in the Top Million Domains

MX records pointing at localhost, a literal ~, and nothing at all — plus a 70-character hostname. Every DNS curiosity comes with a lesson.

Read article →
·9 min readresearchmethodologydnsopenintel

How We Classify a Million Domains' Email Stacks Every Night — and Where It Breaks

Our open methodology: OpenINTEL snapshots, 310+ MX patterns, 81.5% SPF coverage — and honest blind spots like flattening and dictionary jumps.

Read article →
·8 min readresearchespbrazilregional

Brazil's Email Market Is 43% One Company: Regional Monopolies Hiding in Global Averages

Locaweb holds 42.58% of Brazilian ESP-classified domains and KingHost is 99.8% domestic. Country-level DNS cuts reveal what global charts hide.

Read article →
·9 min readwarmupauditmeasurement2026

Why Warmup Vendor Scores Don't Match Real Inbox Placement (2026 Data)

Fifty anonymised 2026 case files where vendor-reported warmup scores of 90+ coexisted with independent inbox placement of 40-60%. The measurement gap, why it exists, and how to close it.

Read article →
·7 min readwarmupopinionverification

The Conflict of Interest in Email Warmup

When the vendor selling the warmup service is also the party grading it, you do not have verification — you have marketing. A 2026 framing of the structural problem and what neutral verification looks like.

Read article →
·9 min readwarmupresearchbulk-sender-rules2024

What Happened to Warmup Networks in 2024 (And Why It Still Matters in 2026)

A factual review of the 2024 Google and Yahoo Bulk Sender Rules, the public enforcement actions against warmup pools that followed, and how the 2026 placement landscape was shaped by both.

Read article →
·10 min readwarmupmethodologyaudit2026

How to Independently Audit Your Email Warmup (2026 Methodology)

A reproducible audit methodology for any warmup tool: setup, controls, the eight-step measurement protocol, the report template, and how to defend the result to a vendor that disputes it.

Read article →
·6 min readwarmupmanifestoverification2026

Stop Trusting Your Warmup Score. Verify It.

A 2026 buyer-side stance: the vendor score is one input, not the truth. Run an independent verification on every campaign that matters. The reasoning, the cost, and the routine that makes verification a habit.

Read article →
·9 min readmail-rucisprovidersauthentication

Mail.ru Spam Filter in 2026: A Practical Reverse-Engineering Guide

How Mail.ru actually decides Inbox vs Spam in 2026 — DKIM-alignment as a hard gate, domain-over-IP reputation, list-unsubscribe as a strong positive signal, and the differences from Gmail/Outlook that catch foreign senders by surprise.

Read article →
·8 min readauthenticationprovidersspfdkimdmarc

SPF vs DKIM vs DMARC at 9 Mailbox Providers — Who Cares Most About What?

How Gmail, Outlook, Yahoo, iCloud, AOL, GMX, T-Online, Mail.ru and Yandex actually weigh SPF, DKIM and DMARC differently — and the per-provider config that minimises Spam-folder placement.

Read article →
·8 min readgmxt-onlinedachproviders

Inbox Placement at GMX and T-Online: The DACH Deliverability Guide Nobody Wrote

GMX and T-Online together hold a meaningful share of the German consumer inbox. Their filters are stricter on SPF, friendlier to CSA-whitelisted senders, and unforgiving of foreign DKIM domains. What to actually do.

Read article →
·8 min readyandexmail-rucisproviders

Yandex Pochta vs Mail.ru: Side-by-Side Spam Filter Behavior

Yandex and Mail.ru together hold the CIS consumer inbox. Their filters look similar from the outside and behave very differently in practice — DKIM weighting, ARC handling, FBL signals, and per-recipient learning rates.

Read article →
·7 min readbimiauthenticationproviders

BIMI Across 9 Mailbox Providers: Who Actually Renders Your Logo (Spoiler: Not Mail.ru)

BIMI is sold as universal sender branding. In 2026 only four major providers actually render the logo, three are exploring it, and the CIS giants Mail.ru and Yandex are nowhere on the roadmap. Here is the real provider matrix.

Read article →
·7 min readthrottlingmail-ruyandexcis

Email Throttling at Mail.ru and Yandex: Why CIS Senders Hit Quotas Earlier Than at Gmail

Mail.ru and Yandex enforce per-IP and per-domain rate limits that bite earlier than Gmail or Outlook. The 4xx temp-fail patterns, the retry windows that work, and the volume ramp that does not get throttled.

Read article →
·7 min readicloudapple-mailproviders

iCloud Mail's Hidden Spam Folder: Why You Don't Even Know You're Filtered

iCloud Mail filters silently. There is no Postmaster Tools, no SNDS, and the Junk folder is buried two taps deep on iOS. The result is opaque deliverability. Here is how to actually see what Apple is doing.

Read article →
·8 min readoutlookmicrosoftproviders

Outlook Focused vs Other vs Junk: What Each Folder Actually Means for Marketers

Microsoft splits the inbox three ways: Focused, Other and Junk. The marketing implications are bigger than they look — Other is not failure and Junk is not always content. Here is the per-folder playbook.

Read article →
·7 min readgmailpromotionsspam

Gmail Promotions vs Spam: Which Tab Hurts Your Open Rate More?

Promotions is not Spam. But Promotions can hurt open rate more than Spam in some segments because users actively visit Spam to recover legitimate mail and rarely open Promotions at all. The data and the playbook.

Read article →
·6 min readtestingoperationscadence

How Often Should You Test Inbox Placement? A Per-Sender Cadence Guide

Daily, weekly, monthly, or only on-demand? The right testing cadence depends on volume, audience, and rate of change. Here is the framework — plus the events that should always trigger an out-of-band test.

Read article →
·10 min readeducationedtechplatforms

Course Platform Emails: Teachable, Thinkific, GetCourse Deliverability

Course-platform emails are sent from the platform's IP pool. Inbox rates vary widely. The custom-domain (CNAME) options at Teachable, Thinkific, and GetCourse — and what to test.

Read article →
·9 min readeventscalendarzoom

Zoom/Google Meet Invite Emails: Do Calendar Invites Bypass Spam?

Calendar invites (.ics) get auto-added to many users' calendars regardless of spam status. Why that's the most underused 'always delivers' channel for events.

Read article →
·9 min readeventsticketseventbrite

Event Ticket Emails Not Received: Eventbrite, Luma, Timepad Deliverability

Eventbrite, Luma, Timepad all send tickets from their own domains. Eventbrite inboxes around 92%, Luma higher, Timepad weaker — what to do as an organizer.

Read article →
·10 min readeventswebinarno-show

Webinar Confirmation Emails in Spam: 30% No-Show Rate Explained

Industry no-show baseline is 50-60%. A chunk of that is just the registrant forgetting — but a measurable slice is the confirmation+reminder hitting spam.

Read article →
·10 min readsaasnotificationsmultichannel

In-App Notification vs Email: When Email Fails, Does Your App Have a Backup?

If 5% of users miss your email and 5% miss your push, the overlap is the silent failure. Why dual-channel notifications need a delivery audit on both legs.

Read article →
·11 min readsaasonboardingretention

SaaS Onboarding Emails: The First 7 Days Decide Retention

Day-0/1/3/7 emails set the retention curve. If they hit Promotions or Spam, you lose users who never even see your product story. The 7-day plan + deliverability angle.

Read article →
·9 min readsaasproduct-updatesengagement

Product Update Emails: Changelog That Nobody Sees

Changelog emails are low-engagement, high-volume, and easy to land in Promotions or Spam. Why this matters for product adoption — and the simple fix.

Read article →
·9 min readsaastrialconversion

Trial Expiration Emails in Spam: You're Losing Conversions and Don't Know It

If 15% of your trial-end emails land in spam, you lose 15% of your potential conversions silently. The diagnostic, fix, and seed-test cadence for trial sequences.

Read article →
·10 min readfintechkyconboarding

KYC Verification Emails Not Arriving: How Fintech Loses Customers at Onboarding

30-50% drop-off at KYC step in fintech. Some of that is friction, some is documents-pending emails landing in spam. The deliverability slice of the KYC funnel.

Read article →
·10 min readfintechpaymentsstripepaypal

Payment Processor Emails: Stripe vs PayPal vs Square Deliverability

Stripe receipts inbox 99%+. PayPal sometimes hits Promotions. Square varies by region. Why the receipt sender choice matters for chargebacks and customer trust.

Read article →
·10 min readfintechbankcompliance

Bank Transaction Alerts Going to Junk: Compliance and Security Risk

When the 'unusual login' alert lands in junk, a customer misses a fraud event. For banks this is a compliance gap. The deliverability + risk angle of bank notifications.

Read article →
·11 min readfintechotptransactional

OTP and Verification Code Emails in Spam: The Fintech Nightmare

When your 6-digit OTP lands in spam, the user can't log in, files a chargeback, or churns. Why fintech OTPs hit spam more than any other transactional email.

Read article →
·11 min readmigrationmulti-esptransactional

Multi-ESP Setup: How to Split Marketing and Transactional Without Breaking Deliverability

Mixing transactional and marketing on one IP poisons your password-reset emails when a campaign goes wrong. The split: separate ESPs, separate subdomains, separate authentication.

Read article →
·11 min readmigrationrebranddomain

Domain Change and Email: How Rebranding Affects Deliverability

A rebrand to a new domain restarts your reputation. The 90-day plan to keep deliverability while you transition From: lines, DNS, and brand identity.

Read article →
·10 min readmigrationipwarmup

Moving From Shared IP to Dedicated: The Warm-Up You Can't Skip

A dedicated IP starts at zero reputation. The 4-week ramp from your existing shared-IP volume — and why most migrations fail at week 3.

Read article →