Cloudflare uses Marketo for marketing email and SparkPost for transactional/notifications. They rank #3 in the Tranco list of most-popular domains. We've also observed sends via 2 other providers: Iterable, Salesforce CRM. Email goes out from 3 different subdomains. Their email authentication setup is solid (score 100/100). We've recorded 4 ESP changes since first observing this brand.
Non-ESP tools detected in this brand's emails. Independent of who sends — a brand can use any combination.
| HTML builder |
Authentication signals observed in this brand's emails. SPF, DKIM and DMARC are the standard sender-authentication stack — see the DMARC policy below for whether spoofing is actually blocked or just monitored. One-click unsubscribe meets Google & Yahoo's bulk-sender requirements.
SPF / DKIM / DMARC above reflect the last 10 emails we've observed. DMARC policy is read live from DNS.
DMARC reports sent to cloudflare.net. Policy
p=reject means receivers actively block or quarantine spoofed mail.
SPF alignment: 48% of observed emails use an aligned return-path (bounce.cloudflare.com, bounce2.cloudflare.com, cf-bounce.notify.cloudflare.com); the rest use third-party paths (gmail.com, yv53j5dasc9n9f7a.wozq96tlojma1nd3.6o50ckf.o-yxikeac.usa234.bnc.salesforce.com, npxrcc5m5mdfzltt.kgt7.o-yxikeac.usa234.bnc.salesforce.com) where DMARC has to rely on DKIM alignment.
DKIM alignment: all 188 observed emails sign with a domain aligned with cloudflare.com (notify.cloudflare.com, cloudflare.com, em1.cloudflare.com). DKIM authenticates the visible From — supports DMARC directly.
TLS: 5% TLS 1.3, 95% TLS 1.2 (across 74 sends).
Delivery: fast — 97% of emails in the last 7 days arrive in under 10 seconds (across 38 sends).
Brands often use multiple ESPs (e.g. one for marketing, another for transactional/notifications).
Iterable 7 Salesforce CRM 6ESPs we've seen sending email for this brand. Green = confirmed by SPF, sender IP rDNS, or known infra pairing (label shows the source). Grey = observed but not yet confirmed by SPF or PTR.
ESPs this brand has authorized in their SPF record. We confirm them with a green ✓ only after seeing recurring use (3+ emails across 2+ days). Until then they stay here — either we haven't observed any email yet, or we've seen a handful but not enough to call them a regular sender for the brand.
Probed: cloudflare.com, bounce2.cloudflare.com, bounce.cloudflare.com, npxrcc5m5mdfzltt.kgt7.o-yxikeac.usa234.bnc.salesforce.com, auacarcc7jduzdwk.7z73ndjceiy8bj4v.dtgzo2.o-yxikeac.usa234.bnc.salesforce.com, bounce1.cloudflare.com, cf-bounce.notify.cloudflare.com, yv53j5dasc9n9f7a.wozq96tlojma1nd3.6o50ckf.o-yxikeac.usa234.bnc.salesforce.com, efdn5v64qeihp45t.far246.o-yxikeac.usa234.bnc.salesforce.com, emailmarketingnyc.com, themathergroupllc.com, gmail.com
Folder distribution across all emails from this brand observed in Gmail inboxes. High inbox % = good deliverability; spam appearances are the headline signal.
| Folder | Count | Share |
|---|---|---|
| inbox | 158 | 95.2% |
| spam | 8 | 4.8% |
Which ESP's emails are landing where. Sorted by spam % so problem senders surface first. Brands using one ESP for marketing and another for transactional often see very different placement profiles per ESP. Per-ESP folder data only started being captured recently — counts here may be smaller than the total above until backfill catches up.
| ESP | Emails | Placement | Inbox % | Tabs % | Spam % |
|---|---|---|---|---|---|
| rapidmail | 8 | 75.0% | 0.0% | 25.0% | |
| Iterable | 7 | 85.7% | 0.0% | 14.3% | |
| SparkPost | 119 | 95.8% | 0.0% | 4.2% | |
| Marketo | 18 | 100.0% | 0.0% | 0.0% | |
| Salesforce CRM | 6 | 100.0% | 0.0% | 0.0% |
Daily observations per ESP. Brands often run multiple ESPs concurrently — marketing on one, transactional on another — so this chart shows usage rather than switches.
IP addresses cloudflare.com has been observed sending from, and where their mail landed in Gmail.
| IP | Hostname | Obs | Placement | Reputation |
|---|---|---|---|---|
| 192.174.87.158 | mta-87-158.sparkpostmail.com |
38 | 4 | Check → |
| 147.253.211.95 | mta-253-211-95.sparkpostmail.com |
36 | 3 | Check → |
| 192.174.87.157 | mta-87-157.sparkpostmail.com |
33 | 3 | Check → |
| 156.70.35.83 | mta-70-35-83.sparkpostmail.com |
7 | 2 | Check → |
| 156.70.24.223 | mta-70-24-223.sparkpostmail.com |
1 | — | Check → |
| 156.70.24.230 | mta-70-24-230.sparkpostmail.com |
1 | — | Check → |
| Domain | ESPs detected | Delivery (7d) |
|---|---|---|
notify.cloudflare.com | SparkPost 175 | |
cloudflare.com | Marketo 18 Salesforce CRM 6 | |
em1.cloudflare.com | Iterable 7 |