Free Tools

SPF Record Checker

Check a domain

We read the v=spf1 record you publish, walk every include: beneath it, and count what each one costs.

Not published it yet? Check a record before you publish it.

What this checks

An SPF record may cause at most ten DNS lookups when a receiver evaluates it. Go over and the record returns permerror, which means SPF contributes nothing at all — and most of that budget is usually spent inside records belonging to the services you send through, not inside your own.

So this expands the whole tree, prices every include: with everything beneath it, and names the term that spends the tenth lookup. Enter a domain above, or paste a record you are about to publish.

Your record says who may send as you. It cannot tell you who does.

Nothing in DNS can. DMARC aggregate reports name every source sending as your domain, which ones pass SPF, and which ones you did not know about. Report URI collects and reads them for you.