Syntax Analyzer

1. Specify domain name

Enter a domain to be checked for the SPF record

2. Specify SPF record

Also enter an SPF record to be analyzed
3. Specify IP address (optional)
Enter any IP address to check if it is authorized to send e-mails by the SPF record

What is the SPF analyzer for?

With the SPF Analyzer you analyze a manually submitted SPF record of a domain for errors, security risks and authorized IP addresses. Optionally, you can specify an IP address to check if it is authorized to send e-mails on behalf of the domain. If you want to analyze an SPF record in real time from the DNS, use the SPF lookup.

Loading...

SPF check passed

Your SPF record check result
  •   SPF record found
  •   Syntax check: 0 errors
  •   Email Anti-Spoofing: Good
Warning: Compliance breach for email deliverability & security

The domain _spfs.kaercher.com does not fulfil the requirements for optimal deliverability to Google, Yahoo and other email service providers.

Mandatory IT baseline protection measures for email security are not fulfilled. There are risks of email misuse.

Summary of the SPF check

Does a valid SPF record exist?
An SPF record was found for the domain _spfs.kaercher.com.
The SPF record for _spfs.kaercher.com is valid.
The syntax check of the SPF record shows no obvious errors.

Which IP-s are legitimate to send emails?
In total, 80 IP address(es) were authorized by the SPF record to send emails.

The SPF record analysis was performed on 19.11.2024 at 14:43:24 clock.

Lookup for the domain:
_spfs.kaercher.com
IP address to be checked:
no IP address specified
Solve your problems in no time
Guaranteed measurable improvement for email deliverability and domain security
Solve your problems in no time

Evaluation for the domain _spfs.kaercher.com 

Nameserverset:
ns-1843.awsdns-38.co.uk
ns-1018.awsdns-63.net
ns-11.awsdns-01.com
ns-1367.awsdns-42.org
Transferred SPF record:
Legitimated IP addresses:
IP Provider / ASN DNSBL-Check
54.240.0.0/18
AMAZON-02 blacklist 
108.177.8.0/21
GOOGLE blacklist 
168.245.0.0/17
SENDGRID blacklist 
223.165.115.0/24
SENDGRID blacklist 
62.75.247.44 Host Europe GmbH blacklist 
52.103.0.0/17
MICROSOFT-CORP-MSN-AS-BLOCK blacklist 
108.177.96.0/19
GOOGLE blacklist 
87.79.30.25 NetCologne Gesellschaft fur Telekommunikation mbH blacklist 
223.165.118.0/23
SENDGRID blacklist 
35.242.247.107/32
GOOGLE-CLOUD-PLATFORM blacklist 
172.217.32.0/20
GOOGLE blacklist 
216.58.192.0/19
GOOGLE blacklist 
173.194.0.0/16
GOOGLE blacklist 
2a00:1450:4000::/36
GOOGLE blacklist 
50.31.32.0/19
SENDGRID blacklist 
216.221.160.0/19
AMAZON-02 blacklist 
74.125.0.0/16
GOOGLE blacklist 
64.233.160.0/19
GOOGLE blacklist 
198.37.144.0/20
SENDGRID blacklist 
91.217.141.0/24
Datagroup Se blacklist 
216.239.32.0/19
GOOGLE blacklist 
223.165.113.0/24
SENDGRID blacklist 
172.217.192.0/19
GOOGLE blacklist 
66.249.80.0/20
GOOGLE blacklist 
2001:4860:4000::/36
GOOGLE blacklist 
87.79.30.30 NetCologne Gesellschaft fur Telekommunikation mbH blacklist 
198.21.0.0/21
SENDGRID blacklist 
3.66.252.83 AMAZON-02 blacklist 
2607:f8b0:4000::/36
GOOGLE blacklist 
35.191.0.0/16
GOOGLE blacklist 
212.227.89.57 IONOS SE blacklist 
217.160.226.166 IONOS SE blacklist 
208.117.48.0/20
SENDGRID blacklist 
54.194.192.132 AMAZON-02 blacklist 
52.100.0.0/15
MICROSOFT-CORP-MSN-AS-BLOCK blacklist 
54.240.64.0/19
AMAZON-AES blacklist 
40.107.0.0/16
MICROSOFT-CORP-MSN-AS-BLOCK blacklist 
34.90.200.156/32
GOOGLE-CLOUD-PLATFORM blacklist 
172.253.112.0/20
GOOGLE blacklist 
104.47.0.0/17
MICROSOFT-CORP-MSN-AS-BLOCK blacklist 
76.223.176.0/20
AMAZON-02 blacklist 
35.204.47.209/32
GOOGLE-CLOUD-PLATFORM blacklist 
2a01:111:f403:8000::/51
MICROSOFT-CORP-MSN-AS-BLOCK blacklist 
54.240.96.0/19
AMAZON-02 blacklist 
35.190.247.0/24
GOOGLE-CLOUD-PLATFORM blacklist 
206.55.144.0/20
AMAZON-02 blacklist 
209.85.128.0/17
GOOGLE blacklist 
199.255.192.0/22
AMAZON-02 blacklist 
82.165.193.1 IONOS SE blacklist 
23.251.224.0/19
AMAZON-02 blacklist 
172.217.160.0/20
GOOGLE blacklist 
85.25.144.9 velia.net Internetdienste GmbH blacklist 
72.14.192.0/18
GOOGLE blacklist 
66.102.0.0/20
GOOGLE blacklist 
35.234.108.85/32
GOOGLE-CLOUD-PLATFORM blacklist 
2a01:111:f403:f000::/52
MICROSOFT-CORP-MSN-AS-BLOCK blacklist 
2c0f:fb50:4000::/36
GOOGLE blacklist 
34.107.8.58/32
GOOGLE-CLOUD-PLATFORM blacklist 
149.72.0.0/16
AMAZON-AES blacklist 
2a01:111:f403::/49
MICROSOFT-CORP-MSN-AS-BLOCK blacklist 
69.169.224.0/20
AMAZON-02 blacklist 
130.211.0.0/22
GOOGLE-CLOUD-PLATFORM blacklist 
23.249.208.0/20
AMAZON-02 blacklist 
40.92.0.0/15
MICROSOFT-CORP-MSN-AS-BLOCK blacklist 
167.89.0.0/17
SENDGRID blacklist 
172.253.56.0/21
GOOGLE blacklist 
195.66.99.135 Datagroup Se blacklist 
223.165.120.0/23
SENDGRID blacklist 
52.102.0.0/16
MICROSOFT-CORP-MSN-AS-BLOCK blacklist 
52.58.175.8 AMAZON-02 blacklist 
2a01:111:f403:c000::/51
MICROSOFT-CORP-MSN-AS-BLOCK blacklist 
172.217.128.0/19
GOOGLE blacklist 
2a01:111:f400::/48
MICROSOFT-CORP-MSN-AS-BLOCK blacklist 
172.217.0.0/19
GOOGLE blacklist 
2404:6800:4000::/36
GOOGLE blacklist 
2800:3f0:4000::/36
GOOGLE blacklist 
159.183.0.0/16
SENDGRID blacklist 
76.223.128.0/19
AMAZON-02 blacklist 
192.254.112.0/20
SENDGRID blacklist 
199.127.232.0/22
AMAZON-02 blacklist 
SPF-Syntax Check:
Analysis result of the SPF record for the domain: _spfs.kaercher.com

SPF record available?

We found an SPF record for the domain.

v=spf1

Additionally authorized IPv4 addresses

Explicit IPv4 addresses in the SPF record have been authorized to send

54.240.0.0/18
108.177.8.0/21
168.245.0.0/17
223.165.115.0/24
62.75.247.44
52.103.0.0/17
108.177.96.0/19
87.79.30.25
223.165.118.0/23
35.242.247.107/32
172.217.32.0/20
216.58.192.0/19
173.194.0.0/16
50.31.32.0/19
216.221.160.0/19
74.125.0.0/16
64.233.160.0/19
198.37.144.0/20
91.217.141.0/24
216.239.32.0/19
223.165.113.0/24
172.217.192.0/19
66.249.80.0/20
87.79.30.30
198.21.0.0/21
3.66.252.83
35.191.0.0/16
212.227.89.57
217.160.226.166
208.117.48.0/20
54.194.192.132
52.100.0.0/15
54.240.64.0/19
40.107.0.0/16
34.90.200.156/32
172.253.112.0/20
104.47.0.0/17
76.223.176.0/20
35.204.47.209/32
54.240.96.0/19
35.190.247.0/24
206.55.144.0/20
209.85.128.0/17
199.255.192.0/22
82.165.193.1
23.251.224.0/19
172.217.160.0/20
85.25.144.9
72.14.192.0/18
66.102.0.0/20
35.234.108.85/32
34.107.8.58/32
149.72.0.0/16
69.169.224.0/20
130.211.0.0/22
23.249.208.0/20
40.92.0.0/15
167.89.0.0/17
172.253.56.0/21
195.66.99.135
223.165.120.0/23
52.102.0.0/16
52.58.175.8
172.217.128.0/19
172.217.0.0/19
159.183.0.0/16
76.223.128.0/19
192.254.112.0/20
199.127.232.0/22

Additionally authorized IPv6 addresses

Explicit IPv6 addresses in the SPF record have been authorized to send

2a00:1450:4000::/36
2001:4860:4000::/36
2607:f8b0:4000::/36
2a01:111:f403:8000::/51
2a01:111:f403:f000::/52
2c0f:fb50:4000::/36
2a01:111:f403::/49
2a01:111:f403:c000::/51
2a01:111:f400::/48
2404:6800:4000::/36
2800:3f0:4000::/36

E-Mail handling

How should the checkHost() function of the e-mail server handle the e-mail? (syntax )

~all
SoftFail (non-compliant e-mails are accepted but marked)

Will be forwarded to another SPF record?

There is no reference to any other SPF record

Are the server addresses allowed to send e-mails?

In the SPF entry the mechanism 'a' has not been set.

Additionally authorized A-records?

In addition to the A-Records stored in the DNS, we could not find any other records authorized in the SPF-Record.

Are the registered mail servers allowed to send e-mails?

In the SPF entry the mechanism 'mx' has not been set

Additionally authorized MX records

We could not find any other records authorized in the SPF record besides the MX records stored in the DNS

Additional external SPF records

We could not find any other records authorized in SPF-Record

How is the sender informed?

The exp mechanism acts as a return to the sender if the IP address was not authorized to send and notify them. None was found.

PTR (obsolete mechanism)

The ptr mechanism is deprecated, slow and insecure and should not be used

PTR:

The ptr mechanism is deprecated, slow and insecure and should not be used

Authorize IP addresses with markers

When SPF is evaluated, macros can specifically authorize Ip addresses based on the request or connection of the user or client (RFC7208 )

Receiver address

analysis.ra-missing

Amount of reports

analysis.rp-missing

Report selection

analysis.rr-missing

Unknown mechanisms

No unknown mechanisms were found in the SPF record.

Recently performed SPF lookups

Server IP Address

We have determined the following IP address for the domain:

No domain specified

Reverse address

We have determined the following name for the server IP address:

No PTR record found

Free whitepaper

How secure is your domain?

  • Practical with many examples
  • the basics of domain risk management summarized in 20 pages
  • Checklist with 53 questions on 14 risk areas

Get a first impression of the risk potential in your company

⮩ Download "Domain Risk Management" for free
All offers are aimed at traders, not end consumers and do not include VAT.
© 2024 nicmanager.com.   All rights reserved.
nicmanager