Skip to content
emailrules.today
Live · uber.com4 Aug 2026

Nothing here is yours.

One finding is shared with your sending platform. The mechanical half is done and the judgement is still yours.

19 DNS lookups24 blocklists askedno entriesno score, ever

read from DNS, quoted verbatim

SPF
v=spf1 include:uber.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:mailgun.org ~all
~all
DMARC
v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email
p=quarantine
DKIM
google._domainkey (Google Workspace) k1._domainkey (Mailchimp) k2._domainkey (Mailchimp) mandrill._domainkey (Mandrill) s1._domainkey (SendGrid) s2._domainkey (SendGrid)
6 selectors
BIMI
v=BIMI1; l=https://amplify.valimail.com/bimi/uber/WSc5-ZpWcvs-uber_tinyps_v4.svg; a=
published
MX
alt4.aspmx.l.google.com aspmx.l.google.com alt1.aspmx.l.google.com alt2.aspmx.l.google.com alt3.aspmx.l.google.com
Google Workspace
LISTS
none of 24 blocklists hold an entry
24 asked

Who sends as you

Signs your mailMailchimp, SendGrid, Mandrillk1._domainkey k2._domainkey s1._domainkey s2._domainkey mandrill._domainkey
✗ these disagree
SPF authorisesMailguninclude:mailgun.org

Mailchimp and SendGrid and Mandrill signs mail as this domain and your SPF has never listed them. Those campaigns fail SPF and pass DMARC on DKIM alignment alone.

4 Aug 2026 · no score, no grade, nothing inferred

Who this domain authorises

Your sender list is held by Valimail

include:uber.com._nspf.vali.email

The record is built from SPF macros, so the senders are resolved per message at delivery time and are genuinely not readable from DNS — not by us, and not by any other checker that tells you it expanded your SPF. Whoever administers Valimail holds the answer to which platforms may send as you; this page can only report what your own record says.

  • Your SPF authorises Mailgun

    • include:mailgun.orgread from your SPF, verbatim

  • Mailchimp signs your mail — and your SPF does not list it

    • k1._domainkeyDKIM key present
    • k2._domainkeyDKIM key present

    2 of Mailchimp’s own selectors carry live keys, which is a setup somebody completed — not a selector collision. Your SPF names somebody else, so this mail passes DMARC on DKIM alignment alone.

  • SendGrid signs your mail — and your SPF does not list it

    • s1._domainkeyDKIM key present
    • s2._domainkeyDKIM key present

    2 of SendGrid’s own selectors carry live keys, which is a setup somebody completed — not a selector collision. Your SPF names somebody else, so this mail passes DMARC on DKIM alignment alone.

Keys are also published on selectors belonging to Mandrill, and your SPF does not authorise it. Selectors like mandrill._domainkey are short enough to collide, so this is worth checking and is not worth believing on its own.

google._domainkey is Google Workspace, which is where staff read mail. It says nothing about where campaigns leave from, and a checker that counts it as your sending platform has told you about your inbox, not your list.

This is what your DNS authorises, not proof of what you send. A domain can authorise a platform it stopped paying for two years ago, which is why an include on its own is reported as permission rather than as use, and it can carry live keys for a platform it never authorised, which is the reverse and the more expensive of the two. Only a real message names the address that actually sent your campaign.

What this cannot see. DNS tells us what you have published, not what you actually send. It cannot read your consent records, your subject lines, or whether DKIM aligns on a real message — the three things that decide where a campaign lands. For those, send us a real campaign and we read them off the message itself.

Whose job each one is

Blocklists

Nothing has an entry for you.

24 lists asked0 with an entry

uber.com is not on any of the 24 lists that answered us today. That is the whole result — there is no score, and a clean answer is allowed to be short.

Which lists, and which would not answer
  • SpamCopanswered
  • PSBLanswered
  • Mailspikeanswered
  • Spam Eating Monkeyanswered
  • blocklist.deanswered
  • 0SPAManswered
  • InterServeranswered
  • SPFBLanswered
  • GBUdb Truncateanswered
  • s5h.netanswered
  • ZapBLanswered
  • SWINOGanswered
  • Kemptanswered
  • Anonmailsanswered
  • Fabelanswered
  • NoSolicitadoanswered
  • Schulteanswered
  • JIPPGanswered
  • UCEPROTECT Level 1answered
  • UCEPROTECT Level 2answered
  • UCEPROTECT Level 3answered
  • Backscattereranswered
  • SEM Backscatteranswered
  • URIBLanswered

Each of these answered an entry it is required to publish, and one it is required not to, before we believed anything it said about you. A list that fails either is reported as unanswered rather than as clean — because a blocklist that declines to reply looks exactly like one giving you the all-clear. How we choose them.

Check another domainPut this in a one-page briefSee which rules are yours

Putting this in a client report? Embed a live, dated badge that re-checks itself.

Watch this domain

One email if authentication DNS for uber.com actually changes. Same list as rule alerts — one inbox, one promise.

One email when a rule that matches your setup moves. Optional domain: one email if SPF, DKIM or DMARC actually changes in DNS. Nothing else.

FAQ

Awkward questions

Who is this actually for?

People who ship email and are too busy to re-read every PDF: week-one marketers, lifecycle/CRM, deliverability, multi-country ops, DTC brands, agencies — on Klaviyo, Mailchimp, Braze, HubSpot, SFMC, or something else. Pick your tool and geos so product-specific pages only appear when they match. EU and UK are first-class filters. Not for people who sell tools about email and need a fake score to demo.

Why only ~40 rules? Isn’t that… thin?

On purpose. A wall of 400 undated “best practices” is how you look busy and still get burned. Every page needs a primary source we actually read. Thin and checkable beats fat and folklore. Europe, bulk inbox rules, measurement honesty, and protocol topics like BIMI/DMARC policy are on the shelf when we can cite them — not every Member State and not every vendor myth. Coverage map lists what we still refuse to invent.

Is this legal advice?

No. If it were, you’d have a billable hour and a longer PDF. This is a dated operator reference written by an email geek. Confirm anything high-stakes with counsel who knows your facts. Same for “will this make me compliant?” — no tool does that. Lawyers and judges do. We say what the sources say and what to do first on Monday.

Why no trust score out of 100?

Because we refuse to invent a number you can’t audit. Fake scores sell seed tests and panic. You get findings, dates, and links. If that feels less exciting than a red dial, good — you’re not the red-dial customer.

Why should I trust you more than my ESP’s blog?

ESPs sell seats. Seed-score vendors sell fear. AI invents citations when nobody watches. We sell nothing today — no pixels, no placement scores, no affiliate — so we can say when a tool is the problem. A human verifies, dates, and corrects in public. Tools may help draft; they do not ship unsourced claims. Check the primary links. Fail that test and leave.

Do I need an account?

No. Filters live in this browser and the URL. Share the link. That’s it. Accounts come later only if they earn it — not so we can nurture you about email.

I’m an agency. Where’s multi-client mode?

We tried a client-name CRM on the setup card. It made the product feel like work before it felt useful. Role filters + copy link + one-page brief (optional PDF title) is enough for now. Complexity comes back when the free shelf is habit, not before.

Is the quiet changelog a bug?

No. Quiet means nothing material moved. We don’t invent urgency so the homepage looks “alive.” Sticky risks still show what usually needs a person when the market is still.