FINDMYIP.CA
Check your SPF record.
Inspect the published sender policy and find the evidence behind SPF warnings.
Locating country…
Look up an IP address or hostname
Enter a public IP address or DNS hostname. Hostnames are resolved to their public IPv4 and IPv6 addresses.
IP TROUBLESHOOTING
IP details
IPv4 and IPv6 connection checks
This optional test uses ipify to discover each public address, then compares its country estimate here.
DNS HEALTH REPORT
Suggested fixes and investigations
| Test | Result | Information |
|---|
No checks match these filters.
What this report checks
Results describe this check from KSP’s network at the time shown. A warning is a reason to investigate; it does not automatically mean a service is broken.
Inspect the published sender policy
Enter your domain and choose Check DNS. In the mail results, find the SPF check to view the TXT record and any related suggestions. SPF describes which servers may send using a domain’s envelope identity; it is separate from the visible From address.
Common SPF troubleshooting steps
- Identify every service that sends mail for your domain, including Microsoft 365, applications, scanners and marketing systems.
- Check the authoritative DNS record and confirm that the sender’s recommended include or address is represented.
- If multiple SPF policy records exist at the same owner, investigate combining the intended policy into one record with your mail provider.
- Use a real message’s Authentication-Results header to see which envelope domain and sending IP were evaluated.
Do not add a broad IP range or change the final qualifier simply to silence a warning. The correct policy depends on your actual sending services. Keep a copy of the original record before changing it.
What this tool does not prove
This report inspects the published SPF DNS record. It does not fully evaluate every nested include, lookup budget and sender-specific path, and it does not send a test message. A healthy-looking record can still fail for an unlisted sender.
SPF also does not guarantee DMARC passes: the authenticated identity must align with the visible From domain. Forwarding can affect SPF, so check DKIM as well.
Technical reference: SPF specification, RFC 7208.
Follow the delegation
Compare the parent delegation with the answers your nameservers actually return.
Check the mail path
Inspect MX hosts, SPF, DMARC and discovered or exact DKIM keys.
Find the next step
See the evidence behind each result and a practical suggestion for issues.