Malwarebytes uses Iterable as their primary email service provider. They rank #3,141 in the Tranco list of most-popular domains. We've also observed sends via Customer.io. Email goes out from 2 different subdomains. Their email authentication setup is solid (score 100/100).
Authentication signals observed in this brand's emails. SPF, DKIM and DMARC are the standard sender-authentication stack — see the DMARC policy below for whether spoofing is actually blocked or just monitored. One-click unsubscribe meets Google & Yahoo's bulk-sender requirements.
SPF / DKIM / DMARC above reflect the last 5 emails we've observed. DMARC policy is read live from DNS.
DMARC reports sent to malwarebytes.com. Policy
p=reject means receivers actively block or quarantine spoofed mail.
SPF alignment: all 24 observed emails use a return-path aligned with malwarebytes.com (bounces.malwarebytes.com). SPF authenticates the visible From — supports DMARC directly.
DKIM alignment: all 22 observed emails sign with a domain aligned with malwarebytes.com (e.malwarebytes.com, d.malwarebytes.com). DKIM authenticates the visible From — supports DMARC directly.
TLS: 0% TLS 1.3, 100% TLS 1.2 (across 12 sends).
Delivery: fast — 100% of emails in the last 7 days arrive in under 10 seconds (across 3 sends).
Brands often use multiple ESPs (e.g. one for marketing, another for transactional/notifications).
Customer.io 1ESPs we've seen sending email for this brand. Green = confirmed by SPF, sender IP rDNS, or known infra pairing (label shows the source). Grey = observed but not yet confirmed by SPF or PTR.
ESPs this brand has authorized in their SPF record. We confirm them with a green ✓ only after seeing recurring use (3+ emails across 2+ days). Until then they stay here — either we haven't observed any email yet, or we've seen a handful but not enough to call them a regular sender for the brand.
Probed: malwarebytes.com, bounces.malwarebytes.com, e.malwarebytes.com, d.malwarebytes.com
Folder distribution across all emails from this brand observed in Gmail inboxes. High inbox % = good deliverability; spam appearances are the headline signal.
| Folder | Count | Share |
|---|---|---|
| inbox | 19 | 76.0% |
| promotions | 6 | 24.0% |
Which ESP's emails are landing where. Sorted by spam % so problem senders surface first. Brands using one ESP for marketing and another for transactional often see very different placement profiles per ESP. Per-ESP folder data only started being captured recently — counts here may be smaller than the total above until backfill catches up.
| ESP | Emails | Placement | Inbox % | Tabs % | Spam % |
|---|---|---|---|---|---|
| Customer.io | 1 | 100.0% | 0.0% | 0.0% | |
| Iterable | 23 | 78.3% | 21.7% | 0.0% |
Daily observations per ESP. Brands often run multiple ESPs concurrently — marketing on one, transactional on another — so this chart shows usage rather than switches.
IP addresses malwarebytes.com has been observed sending from, and where their mail landed in Gmail.
| IP | Hostname | Obs | Placement | Reputation |
|---|---|---|---|---|
| 168.203.33.161 | mta-203-33-161.malwarebytes.com.sparkpostmail.com |
13 | 2 | Check → |
| 168.203.33.162 | mta-203-33-162.malwarebytes.com.sparkpostmail.com |
10 | 1 | Check → |
| 168.203.33.156 | mta-203-33-156.malwarebytes.com.sparkpostmail.com |
1 | — | Check → |
| 156.70.52.18 | mta-70-52-18.sparkpostmail.com |
1 | 1 | Check → |
| Domain | ESPs detected | Delivery (7d) |
|---|---|---|
e.malwarebytes.com | Iterable 23 | |
d.malwarebytes.com | Customer.io 1 Iterable 1 |
