Email infrastructure of spiegel.de

According to Live Direct Marketing's daily DNS scan (September 7, 2026), spiegel.de (Tranco rank #700) points its inbound MX to Microsoft 365 and authorizes Amazon SES, Salesforce in SPF. Its observed DMARC policy is p=quarantine. Across this dataset, 47% of DMARC publishers use an enforcing policy; this does not show where a specific message landed.

Last updated: .

Mailbox provider (MX)Microsoft 365
ESPs in SPFAmazon SES, Salesforce
SaaS senders in SPFnone detected
DMARC policyp=quarantine
DMARC recordv=DMARC1; p=quarantine; rua=mailto:report.dmarc@spiegel.de; ruf=mailto:report.dmarc@spiegel.de; sp=reject; fo=1
Tranco rank#700
Snapshot2026-09-07 (updated daily)

Keep an eye on spiegel.de

Get a first health report, then meaningful changes to SPF, DMARC, MX, sampled MX PTR and blocklists. See your domain history and run a real inbox placement test from your private watchlist.

Manage existing subscriptions →
Monitoring starts only after you explicitly confirm by email. English reports. Stop any time.

How spiegel.de compares

Same daily dataset, three views: how its mailbox provider is trending, how strict DMARC is at its position in the list, and where its own policy sits among all DMARC publishers in the dataset.

Market share of Microsoft 365

DMARC enforced by list position

Policy maturity of all DMARC publishers

From observation to a useful check

What was observed
The DNS records and classifications in this snapshot.
What it means
MX describes inbound mail; SPF authorizes senders.
What is unknown
The actual sending IP, nested SPF dependencies, inbox placement and commercial relationships. MTA-STS, TLS-RPT and BIMI adoption are not measured.
Next check
Verify current DNS and test a real message: run an inbox placement test.

DNS records

Source: OpenINTEL / Tranco. Capture: 2026-09-07. These are answers from the measurement vantage point, not a live DNS check. TTL is the observed cache lifetime in seconds.

spiegel.de · A — Answer records observed

IPv4 addresses for this name. They do not identify the mail server or prove a hosting migration.

Query observed at: 2026-09-07T00:18:35Z.

Response code: 0.

  • spiegel.de · A · TTL 300 s · 2026-09-07T00:18:35Z · AD=0
    128.65.223.150
spiegel.de · AAAA — Unknown: no conclusive answer in this capture

IPv6 addresses for this name. An address record does not test service availability.

spiegel.de · NS — Answer records observed

Name servers listed for the DNS zone.

Query observed at: 2026-09-07T00:18:35Z.

Response code: 0.

  • spiegel.de · NS · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    pns101.cloudns.net.
  • spiegel.de · NS · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    pns102.cloudns.net.
  • spiegel.de · NS · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    pns103.cloudns.net.
  • spiegel.de · NS · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    pns104.cloudns.net.
spiegel.de · MX — Answer records observed

Servers named to receive mail. Lower preference numbers are tried first.

Query observed at: 2026-09-07T00:18:35Z.

Response code: 0.

  • spiegel.de · MX · TTL 3600 s · 2026-09-07T00:18:35Z · AD=0
    0 spiegel-de.mail.protection.outlook.com.
spiegel.de · SOA — Answer records observed

Zone administration data. The serial is a version number, not a creation date or clock.

Query observed at: 2026-09-07T00:18:35Z.

Response code: 0.

  • spiegel.de · SOA · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    expire=1209600; minimum=900; mname=pns101.cloudns.net.; refresh=86400; retry=7200; rname=tech.brandshelter.com.; serial=2023113530
spiegel.de · CAA — Unknown: no conclusive answer in this capture

Rules for certificate issuance. These do not show whether an existing certificate is valid.

spiegel.de · TXT — Answer records observed

Text records can publish mail policies, domain-control challenges or other data.

Query observed at: 2026-09-07T00:18:35Z.

Response code: 0.

  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "00DD0000000mZzl=1TBVl00000000Pp"

  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "01119681"

  • Domain-control verification for Microsoft; not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "MS=ms15909706"

  • Domain-control verification for Adobe IDP; not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "adobe-idp-site-verification=1ab58e56a7c5cfcf85df9cf0e34dc26505b7982a08fd338b70244c5611b99242"

  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "anthropic-domain-verification-199cnz=roKzFqEYT6AZRSPy7A7lASgkj"

  • Domain-control verification for Apple; not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "apple-domain-verification=ABQrqpdvNdt43ZXd"

  • Domain-control verification for Atlassian (Jira / Confluence); not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "atlassian-domain-verification=qkv0u2nj3emGh9UVqNl/2AOp/BxahFJ7m2Bbv8bUPlGhytfsEAB3Zyd8AvXOEHVW"

  • Domain-control verification for Atlassian (Jira / Confluence); not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "atlassian-domain-verification=rnDZY6SZaJnSOpSEvPr0kzhgihiqUPn3g8W0pFQfopQhaMO4jkTWsvLmIj5TeGNB"

  • Domain-control verification for Google; not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "google-site-verification=MPW2epf3b4liwmBTYP8FJEH80rywYRbvVjEeZmcZX_0"

  • Domain-control verification for Google; not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "google-site-verification=d2wrdnHq-bRRkqVOBRvGWuxjCYVnXIiaoOp6U79jKag"

  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "jamf-site-verification=mDxSkZxQSP3_MF8_pHR9BA"

  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "mgverify=ae2a244a3a76e9bcdbe6865e4b169acb67d1168d1ab6518bcfcc3eb11e394afc"

  • SPF: authorized mail senders; not proof that mail was sent.

    Raw TXT valuespiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "v=spf1 ip4:18.196.136.27 ip4:185.45.16.170 ip4:185.45.16.70 include:spf.protection.outlook.com include:amazonses.com include:_spf.salesforce.com -all"
spiegel.de · DNSKEY — Unknown: no conclusive answer in this capture

DNSSEC key, signature or denial-of-existence data observed in this response.

spiegel.de · DS — Unknown: no conclusive answer in this capture

DNSSEC key, signature or denial-of-existence data observed in this response.

spiegel.de · CDS — Unknown: no conclusive answer in this capture

DNSSEC key, signature or denial-of-existence data observed in this response.

spiegel.de · CDNSKEY — Unknown: no conclusive answer in this capture

DNSSEC key, signature or denial-of-existence data observed in this response.

www.spiegel.de · A — Answer records observed

IPv4 addresses for this name. They do not identify the mail server or prove a hosting migration.

Query observed at: 2026-09-07T00:18:35Z.

Response code: 0.

  • spiegel.de · A · TTL 300 s · 2026-09-07T00:18:35Z · AD=0
    128.65.223.150
  • www.spiegel.de · CNAME · TTL 300 s · 2026-09-07T00:18:35Z · AD=0
    spiegel.de.
www.spiegel.de · AAAA — Answer records observed

IPv6 addresses for this name. An address record does not test service availability.

Query observed at: 2026-09-07T00:18:35Z.

Response code: 0.

  • www.spiegel.de · CNAME · TTL 300 s · 2026-09-07T00:18:35Z · AD=0
    spiegel.de.
_dmarc.spiegel.de · TXT — Answer records observed

Text records can publish mail policies, domain-control challenges or other data.

Query observed at: 2026-09-07T00:18:35Z.

Response code: 0.

  • DMARC: published handling and reporting policy for authentication failures.

    Raw TXT value_dmarc.spiegel.de · TXT · TTL 86400 s · 2026-09-07T00:18:35Z · AD=0
    "v=DMARC1; p=quarantine; rua=mailto:report.dmarc@spiegel.de; ruf=mailto:report.dmarc@spiegel.de; sp=reject; fo=1"

DNSSEC records are shown only when returned. An unset AD flag is not proof that a zone is unsigned. MTA-STS, TLS-RPT, BIMI and arbitrary DKIM selectors are not measured here; their absence cannot be inferred.

Recorded DNS history

Registry presence: first seen 2026-04-28; last seen 2026-09-07. These are appearances in our domain registry, not domain registration dates or earlier DNS values.

This history starts with saved RR captures. Provider market-share charts are aggregate context, not this domain’s DNS history. Dates identify observations; no continuous validity between them is implied. Equivalent RR states are combined, ignoring response TTL and capture-time changes. Up to 30 distinct RR states and 60 dated captures are retained within a per-domain byte limit.

No earlier different RR snapshot is available for comparison.

Available saved snapshots
2026-09-07 (equivalent state also recorded on 2026-09-05)

Each query below keeps its own observation date; unknown checks may retain older values.

_dmarc.spiegel.de · TXT

2026-09-07 — Answer records observed

  • DMARC: published handling and reporting policy for authentication failures.

    Raw TXT value_dmarc.spiegel.de · TXT
    "v=DMARC1; p=quarantine; rua=mailto:report.dmarc@spiegel.de; ruf=mailto:report.dmarc@spiegel.de; sp=reject; fo=1"

spiegel.de · A

2026-09-07 — Answer records observed

  • spiegel.de · A
    128.65.223.150

spiegel.de · MX

2026-09-07 — Answer records observed

  • spiegel.de · MX
    0 spiegel-de.mail.protection.outlook.com

spiegel.de · NS

2026-09-07 — Answer records observed

  • spiegel.de · NS
    pns101.cloudns.net
  • spiegel.de · NS
    pns102.cloudns.net
  • spiegel.de · NS
    pns103.cloudns.net
  • spiegel.de · NS
    pns104.cloudns.net

spiegel.de · SOA

2026-09-07 — Answer records observed

  • spiegel.de · SOA
    expire=1209600; minimum=900; mname=pns101.cloudns.net; refresh=86400; retry=7200; rname=tech.brandshelter.com; serial=2023113530

spiegel.de · TXT

2026-09-07 — Answer records observed

  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuespiegel.de · TXT
    "00DD0000000mZzl=1TBVl00000000Pp"

  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuespiegel.de · TXT
    "01119681"

  • Domain-control verification for Microsoft; not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT
    "MS=ms15909706"

  • Domain-control verification for Adobe IDP; not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT
    "adobe-idp-site-verification=1ab58e56a7c5cfcf85df9cf0e34dc26505b7982a08fd338b70244c5611b99242"

  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuespiegel.de · TXT
    "anthropic-domain-verification-199cnz=roKzFqEYT6AZRSPy7A7lASgkj"

  • Domain-control verification for Apple; not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT
    "apple-domain-verification=ABQrqpdvNdt43ZXd"

  • Domain-control verification for Atlassian (Jira / Confluence); not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT
    "atlassian-domain-verification=qkv0u2nj3emGh9UVqNl/2AOp/BxahFJ7m2Bbv8bUPlGhytfsEAB3Zyd8AvXOEHVW"

  • Domain-control verification for Atlassian (Jira / Confluence); not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT
    "atlassian-domain-verification=rnDZY6SZaJnSOpSEvPr0kzhgihiqUPn3g8W0pFQfopQhaMO4jkTWsvLmIj5TeGNB"

  • Domain-control verification for Google; not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT
    "google-site-verification=MPW2epf3b4liwmBTYP8FJEH80rywYRbvVjEeZmcZX_0"

  • Domain-control verification for Google; not proof of active SaaS or mail use.

    Raw TXT valuespiegel.de · TXT
    "google-site-verification=d2wrdnHq-bRRkqVOBRvGWuxjCYVnXIiaoOp6U79jKag"

  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuespiegel.de · TXT
    "jamf-site-verification=mDxSkZxQSP3_MF8_pHR9BA"

  • Other TXT data; its purpose is not established by this measurement.

    Raw TXT valuespiegel.de · TXT
    "mgverify=ae2a244a3a76e9bcdbe6865e4b169acb67d1168d1ab6518bcfcc3eb11e394afc"

  • SPF: authorized mail senders; not proof that mail was sent.

    Raw TXT valuespiegel.de · TXT
    "v=spf1 ip4:18.196.136.27 ip4:185.45.16.170 ip4:185.45.16.70 include:spf.protection.outlook.com include:amazonses.com include:_spf.salesforce.com -all"

www.spiegel.de · A

2026-09-07 — Answer records observed

  • spiegel.de · A
    128.65.223.150
  • www.spiegel.de · CNAME
    spiegel.de

www.spiegel.de · AAAA

2026-09-07 — Answer records observed

  • www.spiegel.de · CNAME
    spiegel.de

Changes to spiegel.de

No entry for this domain appears in the current public change feed. The feed is a selected sample, so this does not establish that its DNS stayed unchanged.

Start monitoring to build a history from your first check, or explore observed changes across the dataset.

SPF diagnostics

Static observations from the published SPF record. No nested include or redirect dependencies were evaluated. The actual sending IP and evaluation path are needed to assess the RFC 7208 limit of 10 DNS-dependent terms.

3DNS-dependent terms — nested dependencies are not checked; headroom is not confirmed
-allfail result for unmatched senders; recipient handling depends on its policy
149 Brecord length · mixed mechanisms

Modern mail security across the dataset

The required DNS labels are not queried. Adoption is unknown for this domain and for the population. Apex TXT anomalies are listed separately in the security posture report.

MTA-STSNot measured in this dataset
TLS-RPTNot measured in this dataset
BIMINot measured in this dataset

Reverse DNS of inbound MX hosts

These are separately dated observations of inbound MX addresses. They do not identify the actual sending IP. To assess outbound mail, check current forward and reverse DNS of the actual sending IP; FCrDNS and delivery were not measured here.

spiegel-de.mail.protection.outlook.com

Partial observation: some addresses were not checked or the resolver could not determine their PTR records.

DNS attempt: 2026-09-07 05:58:42 UTC. 3 of 8 addresses queried; 3 definite address results in the saved observation.

Observed IPObserved PTR namesDNS observation
2a01:111:f403:ca04::6mail-db4pr02cu00406.inbound.protection.outlook.comPTR observed
2a01:111:f403:ca04::amail-du0pr03cu00102.inbound.protection.outlook.comPTR observed
2a01:111:f403:ca09::28mail-am6pr02cu00300.inbound.protection.outlook.comPTR observed
2a01:111:f403:ca21::8—Not checked (query limit)
52.101.181.156—Not checked (query limit)
52.101.185.114—Not checked (query limit)
52.101.68.32—Not checked (query limit)
52.101.73.11—Not checked (query limit)

Observed PTR names are outside this domain. Name relationships are not a forward-confirmed reverse DNS test.

Where spiegel.de stands

The same snapshot cut by zone, by list position and by how alive the published policies are.

Context of .de

Most used sending platforms among 7,336 SPF-publishing domains in Germany: Mailjet (Sinch) 16.3% · Amazon SES 14.4% · Zendesk 10.3% · Brevo (ex-Sendinblue) 9.4%. spiegel.de runs a stack that is typical for this zone.

How to interpret these observations

MX identifies the observed inbound mailbox or gateway. SPF includes identify services authorised to send for the domain. DMARC shows the published authentication policy. The dataset currently contains 3 populated signal groups for this page.

Observed deliverability context: based on the available observations, this page describes DNS configuration only. It does not represent a complete audit of spiegel.de and does not prove that a particular message reaches the inbox or spam folder.

Frequently asked questions

What email provider does spiegel.de use?

spiegel.de uses Microsoft 365 for inbound mail (detected from its primary MX record) as of September 7, 2026, per Live Direct Marketing's daily Tranco top-1M scan.

What ESP does spiegel.de use?

spiegel.de authorises Amazon SES, Salesforce in its SPF record as of September 7, 2026.

Does spiegel.de enforce DMARC?

Partially — spiegel.de publishes p=quarantine (as of September 7, 2026).

Related domain statistics

Nearby domains in the Tranco ranking: seznam.cz · wps.com · fb.com · id5-sync.com

Browse provider data · Compare historical periods · Run an inbox placement test

Your message may perform differently. Run a controlled inbox placement test to evaluate your own message, sender and creative.
Test My Email

Data: Email infrastructure of the Tranco top-1M, daily snapshot 2026-09-07, derived from OpenINTEL forward-DNS measurements. Cite with the date — records change daily.