• SPF Record Found: NSF.gov

SPF Record Found: NSF.gov

v=spf1 ip4:128.150.5.20/26 ip4:66.77.7.161/32 ip4:66.77.15.226/32 ip4:128.150.130.200/31 ip4:15.200.32.0/24 ip4:128.150.225.100 ip4:65.123.16.240/28 ip4:65.127.216.64/27 ip4:3.220.190.25 ip4:3.221.22.181 ip4:35.153.165.194 ip4:18.235.253.50 ip4:23.23.239.161 ip4:52.37.117.118 ip4:35.162.59.88 ip6:2620:10f:6001:5::20/121 include:spf.constantcontact.com include:spf.protection.outlook.com include:amazonses.com ~all

Results
  • This SPF record authorizes 549,821 IPv4 addresses and 2,417,925,426,205,553,187,618,944 IPv6 addresses to send email on behalf of NSF.gov.
  • This record includes 4 DNS querying mechanisms/modifiers. Note that SPF imposes a maximum of 10.
  • The sender believes this SPF record is complete and accurate, but they require more evaluation before they can instruct email receivers to block messages based on an SPF failure. However, this sender does allows email receivers to use the SPF results to assess reputation.
  • Errors have been detected with this record.
    • Invalid CIDR netblock - bits in host portion of address of 128.150.5.20/26
    • Invalid CIDR netblock - bits in host portion of address of 2620:10f:6001:5::20/121
Discovered Tags

The tags and their definitions from the record pulled from agari.com

Mechanism / Modifier Content Number of IP Addresses Authorized Explanation
ip4128.150.5.20/2664Pass if source IP matches.
ip466.77.7.161/321Pass if source IP matches.
ip466.77.15.226/321Pass if source IP matches.
ip4128.150.130.200/312Pass if source IP matches.
ip415.200.32.0/24256Pass if source IP matches.
ip4128.150.225.1001Pass if source IP matches.
ip465.123.16.240/2816Pass if source IP matches.
ip465.127.216.64/2732Pass if source IP matches.
ip43.220.190.251Pass if source IP matches.
ip43.221.22.1811Pass if source IP matches.
ip435.153.165.1941Pass if source IP matches.
ip418.235.253.501Pass if source IP matches.
ip423.23.239.1611Pass if source IP matches.
ip452.37.117.1181Pass if source IP matches.
ip435.162.59.881Pass if source IP matches.
ip62620:10f:6001:5::20/121128Pass if source IP is in range.
includespf.constantcontact.comLook up and include IP addresses from the included domain's SPF record, pass if source IP address matches.
ip4208.75.120.0/221024Pass if source IP matches.
~allSoftfail if source IP address is not contained in any previous mechanism checked.
includespf.protection.outlook.comLook up and include IP addresses from the included domain's SPF record, pass if source IP address matches.
ip440.92.0.0/15131072Pass if source IP matches.
ip440.107.0.0/1665536Pass if source IP matches.
ip452.100.0.0/14262144Pass if source IP matches.
ip4104.47.0.0/1732768Pass if source IP matches.
ip62a01:111:f400::/481.2089258196146E+24Pass if source IP is in range.
ip62a01:111:f403::/481.2089258196146E+24Pass if source IP is in range.
includespfd.protection.outlook.comLook up and include IP addresses from the included domain's SPF record, pass if source IP address matches.
ip451.4.72.0/24256Pass if source IP matches.
ip451.5.72.0/24256Pass if source IP matches.
ip451.5.80.0/2732Pass if source IP matches.
ip420.47.149.138/321Pass if source IP matches.
ip451.4.80.0/2732Pass if source IP matches.
ip62a01:4180:4051:0800::/641.844674407371E+19Pass if source IP is in range.
ip62a01:4180:4050:0800::/641.844674407371E+19Pass if source IP is in range.
ip62a01:4180:4051:0400::/641.844674407371E+19Pass if source IP is in range.
ip62a01:4180:4050:0400::/641.844674407371E+19Pass if source IP is in range.
-allFail if source IP address is not contained in any previous mechanism checked.
-allFail if source IP address is not contained in any previous mechanism checked.
includeamazonses.comLook up and include IP addresses from the included domain's SPF record, pass if source IP address matches.
ip4199.255.192.0/221024Pass if source IP matches.
ip4199.127.232.0/221024Pass if source IP matches.
ip454.240.0.0/1816384Pass if source IP matches.
ip469.169.224.0/204096Pass if source IP matches.
ip423.249.208.0/204096Pass if source IP matches.
ip423.251.224.0/198192Pass if source IP matches.
ip476.223.176.0/204096Pass if source IP matches.
ip454.240.64.0/198192Pass if source IP matches.
ip454.240.96.0/198192Pass if source IP matches.
ip452.82.172.0/221024Pass if source IP matches.
-allFail if source IP address is not contained in any previous mechanism checked.
~allSoftfail if source IP address is not contained in any previous mechanism checked.
Modify SPF Record
An Agari representative can help you create or modify your SPF record. Please fill out this form and someone will be in touch within 24 hours.
All fields marked * are required.

Learn More About SPF

How Does an SPF Record Work?

An SPF record with no errors is a good first step—it means that the domain is considering best practices for authenticating the email it sends. That said, a sender needs to publish a DMARC record to view data for the domain and to ensure the SPF record is complete and accurate. In other words, a sender is not completely protecting its brand without an accompanying DMARC policy.

What Happens if There is No SPF Record?

Be careful! A domain without an SPF record is basically an unprotected domain–meaning that anyone can easily spoof email from this domain. Authorizing the sources that are allowed to send email for the domain by creating a SPF record is one of the first, basic steps that senders need to take to protect themselves from abuse.

Mail Letter

Would you like the confidence to trust your inbox?