DMARC Records Check for

kpn.com

Instant checks for DMARC, SPF, and BIMI — with clear, actionable guidance.

DMARC SPF BIMI

DMARC Check Passed: Properly Configured

DMARC record is valid and configured correctly.

_dmarc.kpn.com TXT Published Record:

v=DMARC1; p=reject; rua=mailto:[email protected]; adkim=s; aspf=r;

Policy (p)

reject

DKIM Alignment (adkim)

Strict (s)

SPF Alignment (aspf)

Relaxed (r)

Understanding Alignment Modes

DKIM Alignment (adkim)

Strict mode: The DKIM signature's domain must exactly match the "From" header domain.

SPF Alignment (aspf)

Relaxed mode: The SPF "Return-Path" domain can be a subdomain of the "From" header domain.

Note: When alignment parameters are not specified, DMARC defaults to relaxed mode for both DKIM and SPF alignment.

Reporting (RUA/RUF)

Aggregate Reports

Configured
[email protected]
External Domain Verification
[email protected]

Verification successful

Learn more about aggregate reports →

Forensic Reports

Not Configured
Learn more about forensic reports →

Add Our Monitoring System Too

You can add our monitoring system alongside your existing setup. DMARC supports multiple mailto: addresses, giving you additional visibility and backup reporting.

  • Automated DMARC report processing every 5 minutes
  • Clear insights and actionable recommendations
  • Track all sending sources and authentication results
Get Started

BIMI Check (default selector)

BIMI Record Found and Looks Good

Current BIMI Record:

v=BIMI1; l=https://vmc.digicert.com/fc41cd85-bdea-434d-8191-0bb93a35edd8.svg; a=https://vmc.digicert.com/fc41cd85-bdea-434d-8191-0bb93a35edd8.pem;

Logo URL

https://vmc.digicert.com/fc41cd85-bdea-434d-8191-0bb93a35edd8.svg

image/svg+xml

Note: We do not parse SVG content for safety.

Verified Mark Certificate

https://vmc.digicert.com/fc41cd85-bdea-434d-8191-0bb93a35edd8.pem

Valid PEM detected

SPF Record Check Results

SPF record is valid.

kpn.com TXT Published SPF Record:

v=spf1 include:spf.safemail.kpn.com ~all

Syntax Check

OK

DNS Lookup Count

9 / 10 max

Close to RFC limit!

Root-level mechanisms requiring DNS queries: 1.

Void Lookups

0 / 2 max

Default Policy

~all

Soft fail: Mark emails from unauthorized servers as suspicious but don't reject

All Authorized IP Addresses

Grouped by DNS record source (includes and sub-includes)

include:spf.branded.safemail.kpn.com
195.121.114.202/32
195.121.114.203/32
195.121.114.204/32
195.121.114.234/32
195.121.114.235/32
195.121.114.236/32
include:et._spf.pardot.com
198.245.81.0/24
136.147.176.0/24
13.111.0.0/16
136.147.182.0/24
136.147.135.0/24
199.122.123.0/24
include:_spf.bluevi.com
20.8.222.128/28
20.8.70.160/28
20.93.28.64/28
20.105.107.208/28
include:spf_c.oraclecloud.com
147.154.59.192/26
147.154.123.119
170.52.3.228
192.29.143.169
159.112.165.64/26
192.29.42.231
129.149.37.192/26
158.178.219.192/26
158.179.11.192/26
170.52.4.253
147.154.14.34
81.208.187.192/26
204.216.114.64/26
158.180.181.192/26
158.179.135.64/26
79.72.112.64/26
64.181.146.64/26

This record also contains:

include:spf_s1.oraclecloud.com include:spf_s2.oraclecloud.com
include:spf_s1.oraclecloud.com
216.131.131.240/28
141.145.63.16/28
129.152.95.16/28
129.152.79.16/28
207.127.109.192/26
151.104.48.26
151.104.61.235
84.235.196.192/26
84.235.197.192/26
84.8.179.64/26
159.13.87.0/26
129.148.11.192/26
207.127.107.192/26
147.154.255.192/26
192.29.216.192/26
146.56.127.192/26
192.29.91.192/26
204.216.119.192/26
129.153.243.192/26
include:spf_s2.oraclecloud.com
147.154.189.192/26
141.145.79.16/28
129.148.219.192/26
129.157.31.16/28
207.211.139.192/26
155.248.28.128/26
155.248.119.192/26
155.248.115.192/26
129.149.63.192/26
192.29.172.192/26
207.127.72.64/26
192.29.207.192/26
192.29.232.192/26
192.29.137.192/26
204.216.127.192/26
192.29.178.192/26
129.149.22.192/26
79.72.22.64/26
79.72.39.64/26
include:eu.rp.oracleemaildelivery.com
192.29.200.0/25
138.1.108.0/25
130.35.116.0/25
192.29.178.0/25
129.149.22.0/25
129.149.118.0/25
129.149.100.0/25
129.149.84.0/25
129.149.68.0/25
155.248.135.128/25
155.248.140.0/25
134.98.248.128/25

DNS Lookup Details

1
include: spf.safemail.kpn.com
Valid

SPF record found

Lookups Count: 5. Included by kpn.com

TXT Record

v=spf1 include:spf.branded.safemail.kpn.com include:aspmx.pardot.com include:_spf.bluevi.com include:spf_c.oraclecloud.com include:eu.rp.oracleemaildelivery.com ?all

Processed recursively per RFC 7208

2
include: spf.branded.safemail.kpn.com
Valid

SPF record found

Lookups Count: 0. Included by spf.safemail.kpn.com

TXT Record

v=spf1 ip4:195.121.114.202/32 ip4:195.121.114.203/32 ip4:195.121.114.204/32 ip4:195.121.114.234/32 ip4:195.121.114.235/32 ip4:195.121.114.236/32 ?all

Processed recursively per RFC 7208

3
include: aspmx.pardot.com
Valid

SPF record found

Lookups Count: 1. Included by spf.safemail.kpn.com

TXT Record

v=spf1 include:et._spf.pardot.com -all

Processed recursively per RFC 7208

4
include: et._spf.pardot.com
Valid

SPF record found

Lookups Count: 0. Included by aspmx.pardot.com

TXT Record

v=spf1 ip4:198.245.81.0/24 ip4:136.147.176.0/24 ip4:13.111.0.0/16 ip4:136.147.182.0/24 ip4:136.147.135.0/24 ip4:199.122.123.0/24 -all

Processed recursively per RFC 7208

5
include: _spf.bluevi.com
Valid

SPF record found

Lookups Count: 0. Included by spf.safemail.kpn.com

TXT Record

v=spf1 ip4:20.8.222.128/28 ip4:20.8.70.160/28 ip4:20.93.28.64/28 ip4:20.105.107.208/28 -all

Processed recursively per RFC 7208

6
include: spf_c.oraclecloud.com
Valid

SPF record found

Lookups Count: 2. Included by spf.safemail.kpn.com

TXT Record

v=spf1 ip4:147.154.59.192/26 ip4:147.154.123.119 include:spf_s1.oraclecloud.com include:spf_s2.oraclecloud.com ip4:170.52.3.228 ip4:192.29.143.169 ip4:159.112.165.64/26 ip4:192.29.42.231 ip4:129.149.37.192/26 ip4:158.178.219.192/26 ip4:158.179.11.192/26 ip4:170.52.4.253 ip4:147.154.14.34 ip4:81.208.187.192/26 ip4:204.216.114.64/26 ip4:158.180.181.192/26 ip4:158.179.135.64/26 ip4:79.72.112.64/26 ip4:64.181.146.64/26 -all

Processed recursively per RFC 7208

7
include: spf_s1.oraclecloud.com
Valid

SPF record found

Lookups Count: 0. Included by spf_c.oraclecloud.com

TXT Record

v=spf1 ip4:216.131.131.240/28 ip4:141.145.63.16/28 ip4:129.152.95.16/28 ip4:129.152.79.16/28 ip4:207.127.109.192/26 ip4:151.104.48.26 ip4:151.104.61.235 ip4:84.235.196.192/26 ip4:84.235.197.192/26 ip4:84.8.179.64/26 ip4:159.13.87.0/26 ip4:129.148.11.192/26 ip4:207.127.107.192/26 ip4:147.154.255.192/26 ip4:192.29.216.192/26 ip4:146.56.127.192/26 ip4:192.29.91.192/26 ip4:204.216.119.192/26 ip4:129.153.243.192/26 -all

Processed recursively per RFC 7208

8
include: spf_s2.oraclecloud.com
Valid

SPF record found

Lookups Count: 0. Included by spf_c.oraclecloud.com

TXT Record

v=spf1 ip4:147.154.189.192/26 ip4:141.145.79.16/28 ip4:129.148.219.192/26 ip4:129.157.31.16/28 ip4:207.211.139.192/26 ip4:155.248.28.128/26 ip4:155.248.119.192/26 ip4:155.248.115.192/26 ip4:129.149.63.192/26 ip4:192.29.172.192/26 ip4:207.127.72.64/26 ip4:192.29.207.192/26 ip4:192.29.232.192/26 ip4:192.29.137.192/26 ip4:204.216.127.192/26 ip4:192.29.178.192/26 ip4:129.149.22.192/26 ip4:79.72.22.64/26 ip4:79.72.39.64/26 -all

Processed recursively per RFC 7208

9
include: eu.rp.oracleemaildelivery.com
Valid

SPF record found

Lookups Count: 0. Included by spf.safemail.kpn.com

TXT Record

v=spf1 ip4:192.29.200.0/25 ip4:138.1.108.0/25 ip4:130.35.116.0/25 ip4:192.29.178.0/25 ip4:129.149.22.0/25 ip4:129.149.118.0/25 ip4:129.149.100.0/25 ip4:129.149.84.0/25 ip4:129.149.68.0/25 ip4:155.248.135.128/25 ip4:155.248.140.0/25 ip4:134.98.248.128/25 ~all

Processed recursively per RFC 7208

Records checked less than a minute ago.

Rate limit: max 1 refresh every 10 minutes

Check Another Domain

Run a free email authentication check (DMARC, SPF, BIMI).

We will generate a new page, share it with your IT guy.

Try popular examples: google.com, amazon.com, gov.uk

About This Checker

What we check

We analyze your domain's email authentication: DMARC policy and alignment, SPF record and includes, and BIMI logo/CV when present.

Why it matters

Healthy authentication improves delivery and blocks spoofing. Major inbox providers increasingly require DMARC and robust SPF/DKIM practices for senders.

Included features

  • DMARC syntax, policy, and reporting validation
  • SPF record evaluation and include analysis
  • DKIM/SPF alignment interpretation
  • BIMI record and VMC detection
  • Clear setup and remediation guidance

Related Tools

Free DMARC Record Generator
Check Another Domain

Beyond This Free Tool: Start Acting Now!

While our free DNS checker gives you a snapshot, register with us to get a clear understanding of your email reputation.

Register Now