craigslist.org

craigslist.org · Last checked 2026-10-04 02:17 UTC

craigslist.org

Good, with 1 thing to fix

craigslist.org scored 88/100 (grade B). The main issue is no DKIM key found for the common selectors.

Checked 2026-10-04 02:17 UTC · fresh check

4 passed1 needs attention0 failing3 for information

All checks

MXCan servers find your inbox?Only one MX hostInfo
  • Info: Only one MX host

    All mail for craigslist.org goes to mxicorpa.craigslist.org. Most hosted providers make that one name highly available; if you run your own server, consider a backup MX.

SPFWho may send as you?No issues foundPass

Nothing to report.

DKIMAre your emails signed?No DKIM key found for the common selectorsNeeds attention
  • Warning: No DKIM key found for the common selectors

    None of the 47 selectors probed under craigslist.org publish a DKIM key. DNS cannot list selectors, so a key under a custom selector may exist: find the s= value in the DKIM-Signature header of a message you sent and check that selector. If DKIM is not set up, enable it at each service that sends mail for craigslist.org.

DMARCWhat happens to fakes?DMARC policy is quarantine; consider rejectInfo
  • Info: DMARC policy is quarantine; consider reject

    Failing mail goes to spam rather than being refused. When reports show no legitimate failures, reject gives the strongest protection.

    How to fix this
AlignmentDoes it match your From?No issues foundPass

Nothing to report.

BIMICan inboxes show your logo?No issues foundPass

Nothing to report.

MTA-STSIs mail to you encrypted?MTA-STS is in testing modeInfo
  • Info: MTA-STS is in testing mode

    Senders report TLS failures (with TLS-RPT) but still deliver. Switch to mode: enforce once the reports are clean.

TLS-RPTWill you hear about failures?TLS-RPT is configuredPass
  • Pass: TLS-RPT is configured

    TLS reports will be sent to mailto:ruarua@craigslist.org.

How to fix it

Strengthen the DMARC policyTXT

Rejects mail that fails DMARC, the strongest protection against spoofing.

TypeTXT
Name / Host
_dmarc.craigslist.org

Some DNS providers want just “_dmarc” here.

Value
v=DMARC1; p=reject; rua=mailto:ruarua@craigslist.org; adkim=r; aspf=r
Replaces
v=DMARC1; p=quarantine; pct=100; rua=mailto:ruarua@craigslist.org; ruf=mailto:rufruf@craigslist.org,mailto:craigslist-dmarc@datafeeds.phishlabs.com;