Email deliverability snapshot · Shopify · Klaviyo · Mailchimp

Your Klaviyo flow can look fine and still fail SPF.

Inboxpass reads SPF, DKIM, DMARC, BIMI, MX, and from-domain alignment on the domain you send from — then writes a scored report in English, with five fixes, in 24 hours.

$129 Snapshot · 24-hour SLA · Watch $49/mo after a 14-day trial

Get a Snapshot → See a real finding

No call. No deck. Pay, send the sending domain, get the report. DNS authentication — not a seed-list inbox test.

Sample finding · live DNS · 29 Aug 2026, 12:58am PT

80 colourpop.com · Shopify storefront

SPF never says -all — Gmail does not know who to reject

Public Shopify anycast (A 23.227.38.65). We did not send them mail. We queried DNS.

SPF

v=spf1 mx include:_spf.google.com — no -all, no Shopify, no Mailchimp

DMARC

p=reject with rua. Enforcement is on. The SPF holes are now expensive.

DKIM

Selectors that answered: google, k1 (Mailchimp’s default). Klaviyo / shopify selectors: empty.

Fix 1

Terminate SPF with -all after listing every ESP. Stay under 10 lookups.

Fix 2

Mailchimp k1 is live; SPF does not include Mailchimp. Add the include.

Fix 3

Shopify storefront, but shops.shopify.com is not in SPF.

What we check

Six records. One score. No theater.

SPF

Present? Includes? Lookup count against the RFC 7208 cap of 10? Flattening risk if you add Attentive next week?

DMARC

none / quarantine / reject. rua mailbox. Whether the policy actually does anything.

DKIM

We try google, k1, k2, s1, s2, selector1, selector2, klaviyo, mailchimp, shopify, sendgrid, amazonses, cm, mx, default. Custom selectors you name, we add.

BIMI

Is the logo record there? Only useful once DMARC is enforcing.

MX

Where replies and bounces go. Null MX vs “we forgot.”

Alignment

Shopify IP with no Shopify include. Mailchimp k1 with no Mailchimp SPF. Inferred from DNS — we do not capture a live message.

Also MTA-STS and TLS-RPT if present. If a lookup fails, the report says failed. We do not invent records.

What you get

A 4–6 page Snapshot, not a dashboard login.

A 0–100 score and one honest headline (“Gmail can send this to spam,” or whatever the records actually say).
Every record quoted, not paraphrased.
Five ranked fixes with the TXT to paste this week.
24-hour SLA from paid Stripe. Usually faster.
A 14-day Watch trial: we re-query weekly and tell you if someone breaks SPF.

Pricing

Pay. Send the domain. Get the report.

Snapshot

$129

24-hour SLA from paid Stripe

One sending domain. SPF, DKIM, DMARC, BIMI, MX, alignment notes. Five fixes. HTML report. Watch trial attached.

Pay $129 →

Watch

$49 /mo

14-day trial on every Snapshot

Weekly DNS re-check. Alert if records drift or break. Cancel anytime. The usual failure is a contractor adding an ESP, not a hacker.

Start Watch trial →

Fit

Built for Shopify mail, not for a sales call.

Who it’s for

Shopify stores sending Klaviyo, Mailchimp, or Attentive
DTC beauty, apparel, CPG, home — a founder or email lead who can put $129 on a card
You just got “your mail is going to spam” from a customer

Who it’s not for

B2B SaaS / indie developer tools (different product)
Anyone who needs procurement, a SOW, or a “strategy call”
Anyone buying a seed-list inbox-placement test — we don’t sell that

FAQ

Short answers.

Is this a free audit?

No. Free-audit emails are spam. You pay $129. We query DNS. You get the report in 24 hours.

Will you hop on a call first?

No. The Stripe link is the call.

Do you guarantee inbox placement?

No. We audit DNS authentication. Gmail still weighs complaints, list quality, and domain reputation. We will not pretend a TXT record is a placement test.

What if our DNS is already perfect?

You still get the grid, the lookup count, and Watch. If you want your money back because you already knew, email us within 7 days of delivery.

How is this different from MXToolbox?

MXToolbox is a console. This is a scored, plain-English report with five ranked fixes, a 24-hour SLA, and a weekly Watch. You are paying for the write-up and the follow-through, not a green check.

Who is Inboxpass?

A new productized audit, run by an operator in La Jolla. Not Liftspan. Not Citebase. Not an agency.

Records rot. Catch it before Gmail does.

Contractors add ESPs. Shopify apps write TXT. Someone deletes DKIM. Snapshot today, Watch after.

Get the Snapshot — $129 Watch — $49/mo