Content containing a spammy Cloudmark fingerprint is usually sent to the spam folder or blocked by participating mailbox providers. If you suspect your content has a spammy Cloudmark fingerprint, open Return Path Platform and look at your campaigns' deliverability performance.
If you do not have Return Path Platform or access to the CoreSeeds for the companies listed below, some mailbox providers that use Cloudmark will reference Cloudmark in their SMTP bounce error code. Contact your ESP, hosting provider or email administrator to help you gain access to the SMTP error code messages or reports.
Cox, Sympatico (Canada), and Terra (Brazil) will usually place your email in the spam folder.
- To confirm that you have a spammy Cloudmark fingerprint, select a campaign in Return Path Platform that has the pattern described for the mailbox providers listed above.
- Select the mailbox provider's Details button to get detailed data at the CoreSeed level.
- Click on View Seed Data if you cannot see the list of CoreSeeds.
- Click on View next to a CoreSeed in the spam folder.
- In the email header, look for the line that starts with X-Authority-Analysis, X-Cloudmark-Analysis, or X-CM-Analysis and look for the p= value.
You are looking for something like:
X-Authority-Analysis: v=1.0 c=0 p=neZ8rOBKY8RCsn2dNZAA:9 a=AKN1m6ldSC8A:10 a=QohdFYnNhn4A:10 a=TAyLsFIKAAAA:8 a=dEkErsIXAAAA:8 a=tVVJVAu5AAAA:8
X-Cloudmark-Analysis: v=1.0 c=0 p=neZ8rOBKY8RCsn2dNZAA:9 a=AKN1m6ldSC8A:10 a=QohdFYnNhn4A:10 a=TAyLsFIKAAAA:8 a=dEkErsIXAAAA:8 a=tVVJVAu5AAAA:8
X-CM-Analysis: v=1.0 c=0 p=neZ8rOBKY8RCsn2dNZAA:9 a=AKN1m6ldSC8A:10 a=QohdFYnNhn4A:10 a=TAyLsFIKAAAA:8 a=dEkErsIXAAAA:8 a=tVVJVAu5AAAA:8
If the header contains a p= value, this indicates that Cloudmark has given the fingerprint a spammy designation. A header with an a= value simply indicates that fingerprinting has occurred. All email that is reviewed by the Cloudmark system will have an a= value.
- If the p= value is the same across all CoreSeeds for that mailbox provider in that campaign, the content is considered spammy.
- If you see multiple p= values in the same header for a single campaign, it just means there is more than one aspect of your email that Cloudmark considers to be spammy.
- If only a few of the CoreSeeds have the p= value, it indicates that the content is receiving a mix of spammy and non-spammy designations by Cloudmark. The content may continue to be marked as spammy and should be monitored closely.
- If the content is consistently receiving both spammy and non-spammy designations over a few sends, take steps to troubleshoot, fix the cause, and request a reputation reset from Cloudmark.
- If the p= value is the same for multiple campaigns assigned to a particular mail stream, then the mail stream is considered spammy.
- It is rare for Cloudmark to classify an IP address as spammy. For this to occur, the same p= value would be present for all email sent from the IP address.
If you identify that your campaign has a spammy Cloudmark fingerprint, go here for tips on troubleshooting the cause and requesting a reputation reset from Cloudmark.