Xero uses Salesforce MC for marketing email and Mailgun for transactional/notifications. They rank #3,244 in the Tranco list of most-popular domains. Email goes out from 2 different subdomains. Their email authentication setup is solid (score 100/100).
Authentication signals observed in this brand's emails. SPF, DKIM and DMARC are the standard sender-authentication stack — see the DMARC policy below for whether spoofing is actually blocked or just monitored. One-click unsubscribe meets Google & Yahoo's bulk-sender requirements.
SPF / DKIM / DMARC above reflect the last 10 emails we've observed. DMARC policy is read live from DNS.
DMARC reports sent to Agari (Proofpoint). Policy
p=reject means receivers actively block or quarantine spoofed mail.
SPF alignment: observed emails use a third-party return-path (adsalsagroup.com) — SPF passes there but doesn't align with xero.com, so DMARC has to rely on DKIM alignment.
DKIM alignment: all 65 observed emails sign with a domain aligned with xero.com (post.xero.com). DKIM authenticates the visible From — supports DMARC directly.
VMC issued by: digicert.
TLS: 0% TLS 1.3, 100% TLS 1.2 (across 45 sends).
Delivery: fast — 100% of emails in the last 7 days arrive in under 10 seconds (across 18 sends).
Brands often use multiple ESPs (e.g. one for marketing, another for transactional/notifications).
None — only the primary ESP(s) shown aboveESPs we've seen sending email for this brand. Green = confirmed by SPF, sender IP rDNS, or known infra pairing (label shows the source). Grey = observed but not yet confirmed by SPF or PTR.
ESPs this brand has authorized in their SPF record. We confirm them with a green ✓ only after seeing recurring use (3+ emails across 2+ days). Until then they stay here — either we haven't observed any email yet, or we've seen a handful but not enough to call them a regular sender for the brand.
Probed: xero.com, adsalsagroup.com, post.xero.com, send.xero.com
Folder distribution across all emails from this brand observed in Gmail inboxes. High inbox % = good deliverability; spam appearances are the headline signal.
| Folder | Count | Share |
|---|---|---|
| inbox | 61 | 98.4% |
| spam | 1 | 1.6% |
Which ESP's emails are landing where. Sorted by spam % so problem senders surface first. Brands using one ESP for marketing and another for transactional often see very different placement profiles per ESP. Per-ESP folder data only started being captured recently — counts here may be smaller than the total above until backfill catches up.
| ESP | Emails | Placement | Inbox % | Tabs % | Spam % |
|---|---|---|---|---|---|
| Mailgun | 56 | 98.2% | 0.0% | 1.8% |
Daily observations per ESP. Brands often run multiple ESPs concurrently — marketing on one, transactional on another — so this chart shows usage rather than switches.
IP addresses xero.com has been observed sending from, and where their mail landed in Gmail.
| IP | Hostname | Obs | Placement | Reputation |
|---|---|---|---|---|
| 198.244.57.60 | relay.post.xero.com |
22 | 6 | Check → |
| 204.220.179.144 | relay.post.xero.com |
13 | 5 | Check → |
| 143.55.228.16 | v516.v560d213d.use4.send.mailgun.net |
10 | 1 | Check → |
| 198.244.57.62 | relay.post.xero.com |
9 | — | Check → |
| 198.244.57.39 | relay.post.xero.com |
7 | 3 | Check → |
| 198.244.57.59 | relay.post.xero.com |
5 | 4 | Check → |
| 204.220.179.19 | relay.post.xero.com |
4 | — | Check → |
| 204.220.179.140 | relay.post.xero.com |
3 | 1 | Check → |
| 198.244.57.61 | relay.post.xero.com |
2 | — | Check → |
| 13.111.97.223 | mta.send.xero.com |
1 | — | Check → |
| Domain | ESPs detected | Delivery (7d) |
|---|---|---|
post.xero.com | Mailgun 79 | |
send.xero.com | Salesforce MC 1 |