esc
↑↓ navigate ↵ open esc close

SPF Checker

Validate SPF DNS syntax, check a domain SPF record, parse mechanisms and count include-chain DNS lookups against the 10-lookup limit.

Examples google.com github.com cloudflare.com
SPF Record Valid TXT ~all · SoftFail
paypal.com
Published as a DNS TXT record · 200 characters · 1 of 1 SPF record
v=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com include:3ph4._spf.paypal.com include:sendgrid.net include:aspmx.pardot.com ~all
DNS lookups
9 / 10
Mechanisms
8
Sending sources
7
9 of 10 DNS lookups
Validation
5 passed@if(data.warnCount) · 2 to review@end@if(data.failCount) · 0 failed@end
Exactly one SPF record published
A domain must publish a single v=spf1 TXT record — multiple records cause a PermError.
Pass
Starts with the v=spf1 version tag
The record opens with the correct, case-insensitive version token.
Pass
9 of 10 DNS lookups used
SPF permits at most 10 DNS-querying mechanisms before a PermError. You have 1 to spare.
Review
Enforcement is ~all (SoftFail)
Unauthorised mail is accepted but flagged. Move to -all once every legitimate sender is listed, to reject spoofed mail outright.
Review
No +all mechanism
The record does not authorise the entire internet to send mail as this domain.
Pass
No deprecated ptr mechanism
ptr is slow and discouraged by RFC 7208 — none present.
Pass
Each string under 255 characters
The record is 200 characters and fits in a single DNS TXT string.
Pass
Mechanisms
8 terms
QualifierMechanismValueDNS lookup
Pass include pp._spf.paypal.com +1
Pass include 3ph1._spf.paypal.com +1
Pass include 3ph2._spf.paypal.com +1
Pass include 3ph3._spf.paypal.com +1
Pass include 3ph4._spf.paypal.com +1
Pass include sendgrid.net +1
Pass include aspmx.pardot.com +1
SoftFail all ~all —
DNS lookup chain
9 / 10 lookups
@if(node.kind === 'include')paypal.com v=spf1@elseif(node.kind === 'all')paypal.com v=spf1@elseif(node.kind === 'root')paypal.com v=spf1@elsepaypal.com v=spf1@endif cost
├─ @if(node.kind === 'include')include:pp._spf.paypal.com@elseif(node.kind === 'all')include:pp._spf.paypal.com@elseif(node.kind === 'root')include:pp._spf.paypal.com@elseinclude:pp._spf.paypal.com@endif +1
│  ├─ @if(node.kind === 'include')ip4:173.0.84.224/27@elseif(node.kind === 'all')ip4:173.0.84.224/27@elseif(node.kind === 'root')ip4:173.0.84.224/27@elseip4:173.0.84.224/27@endif 0
│  ├─ @if(node.kind === 'include')ip4:66.211.170.85/30@elseif(node.kind === 'all')ip4:66.211.170.85/30@elseif(node.kind === 'root')ip4:66.211.170.85/30@elseip4:66.211.170.85/30@endif 0
│  ├─ @if(node.kind === 'include')ip4:66.211.170.88/29@elseif(node.kind === 'all')ip4:66.211.170.88/29@elseif(node.kind === 'root')ip4:66.211.170.88/29@elseip4:66.211.170.88/29@endif 0
│  ├─ @if(node.kind === 'include')ip4:173.224.165.0/26@elseif(node.kind === 'all')ip4:173.224.165.0/26@elseif(node.kind === 'root')ip4:173.224.165.0/26@elseip4:173.224.165.0/26@endif 0
│  ├─ @if(node.kind === 'include')ip4:173.224.166.48/28@elseif(node.kind === 'all')ip4:173.224.166.48/28@elseif(node.kind === 'root')ip4:173.224.166.48/28@elseip4:173.224.166.48/28@endif 0
│  ├─ @if(node.kind === 'include')ip4:173.0.94.244/30@elseif(node.kind === 'all')ip4:173.0.94.244/30@elseif(node.kind === 'root')ip4:173.0.94.244/30@elseip4:173.0.94.244/30@endif 0
│  ├─ @if(node.kind === 'include')ip4:173.224.161.128/25@elseif(node.kind === 'all')ip4:173.224.161.128/25@elseif(node.kind === 'root')ip4:173.224.161.128/25@elseip4:173.224.161.128/25@endif 0
│  ├─ @if(node.kind === 'include')ip4:173.0.84.0/29@elseif(node.kind === 'all')ip4:173.0.84.0/29@elseif(node.kind === 'root')ip4:173.0.84.0/29@elseip4:173.0.84.0/29@endif 0
│  └─ @if(node.kind === 'include')-all@elseif(node.kind === 'all')-all@elseif(node.kind === 'root')-all@else-all@endif 0
├─ @if(node.kind === 'include')include:3ph1._spf.paypal.com@elseif(node.kind === 'all')include:3ph1._spf.paypal.com@elseif(node.kind === 'root')include:3ph1._spf.paypal.com@elseinclude:3ph1._spf.paypal.com@endif +1
│  ├─ @if(node.kind === 'include')ip4:208.201.241.163@elseif(node.kind === 'all')ip4:208.201.241.163@elseif(node.kind === 'root')ip4:208.201.241.163@elseip4:208.201.241.163@endif 0
│  ├─ @if(node.kind === 'include')ip4:67.72.99.26@elseif(node.kind === 'all')ip4:67.72.99.26@elseif(node.kind === 'root')ip4:67.72.99.26@elseip4:67.72.99.26@endif 0
│  ├─ @if(node.kind === 'include')ip4:206.165.246.80/29@elseif(node.kind === 'all')ip4:206.165.246.80/29@elseif(node.kind === 'root')ip4:206.165.246.80/29@elseip4:206.165.246.80/29@endif 0
│  ├─ @if(node.kind === 'include')ip4:64.127.115.252@elseif(node.kind === 'all')ip4:64.127.115.252@elseif(node.kind === 'root')ip4:64.127.115.252@elseip4:64.127.115.252@endif 0
│  ├─ @if(node.kind === 'include')ip4:194.64.234.129@elseif(node.kind === 'all')ip4:194.64.234.129@elseif(node.kind === 'root')ip4:194.64.234.129@elseip4:194.64.234.129@endif 0
│  ├─ @if(node.kind === 'include')ip4:65.110.161.77@elseif(node.kind === 'all')ip4:65.110.161.77@elseif(node.kind === 'root')ip4:65.110.161.77@elseip4:65.110.161.77@endif 0
│  ├─ @if(node.kind === 'include')ip4:204.13.11.48/29@elseif(node.kind === 'all')ip4:204.13.11.48/29@elseif(node.kind === 'root')ip4:204.13.11.48/29@elseip4:204.13.11.48/29@endif 0
│  ├─ @if(node.kind === 'include')ip4:63.80.14.0/23@elseif(node.kind === 'all')ip4:63.80.14.0/23@elseif(node.kind === 'root')ip4:63.80.14.0/23@elseip4:63.80.14.0/23@endif 0
│  ├─ @if(node.kind === 'include')ip4:208.64.132.0/22@elseif(node.kind === 'all')ip4:208.64.132.0/22@elseif(node.kind === 'root')ip4:208.64.132.0/22@elseip4:208.64.132.0/22@endif 0
│  ├─ @if(node.kind === 'include')ip4:81.223.46.0/27@elseif(node.kind === 'all')ip4:81.223.46.0/27@elseif(node.kind === 'root')ip4:81.223.46.0/27@elseip4:81.223.46.0/27@endif 0
│  ├─ @if(node.kind === 'include')ip4:216.136.168.80/28@elseif(node.kind === 'all')ip4:216.136.168.80/28@elseif(node.kind === 'root')ip4:216.136.168.80/28@elseip4:216.136.168.80/28@endif 0
│  ├─ @if(node.kind === 'include')ip4:129.41.77.70@elseif(node.kind === 'all')ip4:129.41.77.70@elseif(node.kind === 'root')ip4:129.41.77.70@elseip4:129.41.77.70@endif 0
│  └─ @if(node.kind === 'include')~all@elseif(node.kind === 'all')~all@elseif(node.kind === 'root')~all@else~all@endif 0
├─ @if(node.kind === 'include')include:3ph2._spf.paypal.com@elseif(node.kind === 'all')include:3ph2._spf.paypal.com@elseif(node.kind === 'root')include:3ph2._spf.paypal.com@elseinclude:3ph2._spf.paypal.com@endif +1
│  ├─ @if(node.kind === 'include')ip4:208.85.50.137@elseif(node.kind === 'all')ip4:208.85.50.137@elseif(node.kind === 'root')ip4:208.85.50.137@elseip4:208.85.50.137@endif 0
│  ├─ @if(node.kind === 'include')ip4:157.151.208.65@elseif(node.kind === 'all')ip4:157.151.208.65@elseif(node.kind === 'root')ip4:157.151.208.65@elseip4:157.151.208.65@endif 0
│  ├─ @if(node.kind === 'include')ip4:208.40.232.70@elseif(node.kind === 'all')ip4:208.40.232.70@elseif(node.kind === 'root')ip4:208.40.232.70@elseip4:208.40.232.70@endif 0
│  ├─ @if(node.kind === 'include')ip4:12.130.86.238@elseif(node.kind === 'all')ip4:12.130.86.238@elseif(node.kind === 'root')ip4:12.130.86.238@elseip4:12.130.86.238@endif 0
│  ├─ @if(node.kind === 'include')ip4:198.178.234.57@elseif(node.kind === 'all')ip4:198.178.234.57@elseif(node.kind === 'root')ip4:198.178.234.57@elseip4:198.178.234.57@endif 0
│  ├─ @if(node.kind === 'include')ip4:67.221.168.65@elseif(node.kind === 'all')ip4:67.221.168.65@elseif(node.kind === 'root')ip4:67.221.168.65@elseip4:67.221.168.65@endif 0
│  ├─ @if(node.kind === 'include')ip4:216.136.162.120/29@elseif(node.kind === 'all')ip4:216.136.162.120/29@elseif(node.kind === 'root')ip4:216.136.162.120/29@elseip4:216.136.162.120/29@endif 0
│  ├─ @if(node.kind === 'include')ip4:216.136.162.65@elseif(node.kind === 'all')ip4:216.136.162.65@elseif(node.kind === 'root')ip4:216.136.162.65@elseip4:216.136.162.65@endif 0
│  ├─ @if(node.kind === 'include')ip4:74.112.67.243@elseif(node.kind === 'all')ip4:74.112.67.243@elseif(node.kind === 'root')ip4:74.112.67.243@elseip4:74.112.67.243@endif 0
│  ├─ @if(node.kind === 'include')ip4:204.92.114.187@elseif(node.kind === 'all')ip4:204.92.114.187@elseif(node.kind === 'root')ip4:204.92.114.187@elseip4:204.92.114.187@endif 0
│  ├─ @if(node.kind === 'include')ip4:65.212.180.36@elseif(node.kind === 'all')ip4:65.212.180.36@elseif(node.kind === 'root')ip4:65.212.180.36@elseip4:65.212.180.36@endif 0
│  ├─ @if(node.kind === 'include')ip4:8.20.114.31@elseif(node.kind === 'all')ip4:8.20.114.31@elseif(node.kind === 'root')ip4:8.20.114.31@elseip4:8.20.114.31@endif 0
│  └─ @if(node.kind === 'include')~all@elseif(node.kind === 'all')~all@elseif(node.kind === 'root')~all@else~all@endif 0
├─ @if(node.kind === 'include')include:3ph3._spf.paypal.com@elseif(node.kind === 'all')include:3ph3._spf.paypal.com@elseif(node.kind === 'root')include:3ph3._spf.paypal.com@elseinclude:3ph3._spf.paypal.com@endif +1
│  ├─ @if(node.kind === 'include')ip4:8.20.114.31@elseif(node.kind === 'all')ip4:8.20.114.31@elseif(node.kind === 'root')ip4:8.20.114.31@elseip4:8.20.114.31@endif 0
│  ├─ @if(node.kind === 'include')ip4:108.175.18.45@elseif(node.kind === 'all')ip4:108.175.18.45@elseif(node.kind === 'root')ip4:108.175.18.45@elseip4:108.175.18.45@endif 0
│  ├─ @if(node.kind === 'include')ip4:108.175.30.45@elseif(node.kind === 'all')ip4:108.175.30.45@elseif(node.kind === 'root')ip4:108.175.30.45@elseip4:108.175.30.45@endif 0
│  ├─ @if(node.kind === 'include')ip4:54.244.242.0/24@elseif(node.kind === 'all')ip4:54.244.242.0/24@elseif(node.kind === 'root')ip4:54.244.242.0/24@elseip4:54.244.242.0/24@endif 0
│  ├─ @if(node.kind === 'include')ip4:209.67.98.46@elseif(node.kind === 'all')ip4:209.67.98.46@elseif(node.kind === 'root')ip4:209.67.98.46@elseip4:209.67.98.46@endif 0
│  ├─ @if(node.kind === 'include')ip4:206.25.247.143@elseif(node.kind === 'all')ip4:206.25.247.143@elseif(node.kind === 'root')ip4:206.25.247.143@elseip4:206.25.247.143@endif 0
│  ├─ @if(node.kind === 'include')ip4:209.46.117.179@elseif(node.kind === 'all')ip4:209.46.117.179@elseif(node.kind === 'root')ip4:209.46.117.179@elseip4:209.46.117.179@endif 0
│  ├─ @if(node.kind === 'include')ip4:54.241.16.209@elseif(node.kind === 'all')ip4:54.241.16.209@elseif(node.kind === 'root')ip4:54.241.16.209@elseip4:54.241.16.209@endif 0
│  ├─ @if(node.kind === 'include')ip4:209.67.98.59@elseif(node.kind === 'all')ip4:209.67.98.59@elseif(node.kind === 'root')ip4:209.67.98.59@elseip4:209.67.98.59@endif 0
│  ├─ @if(node.kind === 'include')ip4:54.214.39.184@elseif(node.kind === 'all')ip4:54.214.39.184@elseif(node.kind === 'root')ip4:54.214.39.184@elseip4:54.214.39.184@endif 0
│  ├─ @if(node.kind === 'include')ip4:209.46.117.168@elseif(node.kind === 'all')ip4:209.46.117.168@elseif(node.kind === 'root')ip4:209.46.117.168@elseip4:209.46.117.168@endif 0
│  ├─ @if(node.kind === 'include')ip4:206.25.247.155@elseif(node.kind === 'all')ip4:206.25.247.155@elseif(node.kind === 'root')ip4:206.25.247.155@elseip4:206.25.247.155@endif 0
│  ├─ @if(node.kind === 'include')ip4:198.61.254.231@elseif(node.kind === 'all')ip4:198.61.254.231@elseif(node.kind === 'root')ip4:198.61.254.231@elseip4:198.61.254.231@endif 0
│  └─ @if(node.kind === 'include')~all@elseif(node.kind === 'all')~all@elseif(node.kind === 'root')~all@else~all@endif 0
├─ @if(node.kind === 'include')include:3ph4._spf.paypal.com@elseif(node.kind === 'all')include:3ph4._spf.paypal.com@elseif(node.kind === 'root')include:3ph4._spf.paypal.com@elseinclude:3ph4._spf.paypal.com@endif +1
│  ├─ @if(node.kind === 'include')ip4:182.50.78.64/28@elseif(node.kind === 'all')ip4:182.50.78.64/28@elseif(node.kind === 'root')ip4:182.50.78.64/28@elseip4:182.50.78.64/28@endif 0
│  ├─ @if(node.kind === 'include')ip4:204.14.232.64/28@elseif(node.kind === 'all')ip4:204.14.232.64/28@elseif(node.kind === 'root')ip4:204.14.232.64/28@elseip4:204.14.232.64/28@endif 0
│  ├─ @if(node.kind === 'include')ip4:96.43.148.64/28@elseif(node.kind === 'all')ip4:96.43.148.64/28@elseif(node.kind === 'root')ip4:96.43.148.64/28@elseip4:96.43.148.64/28@endif 0
│  ├─ @if(node.kind === 'include')ip4:96.43.144.64/28@elseif(node.kind === 'all')ip4:96.43.144.64/28@elseif(node.kind === 'root')ip4:96.43.144.64/28@elseip4:96.43.144.64/28@endif 0
│  ├─ @if(node.kind === 'include')ip4:96.43.151.64/28@elseif(node.kind === 'all')ip4:96.43.151.64/28@elseif(node.kind === 'root')ip4:96.43.151.64/28@elseip4:96.43.151.64/28@endif 0
│  ├─ @if(node.kind === 'include')ip4:204.14.232.64/28@elseif(node.kind === 'all')ip4:204.14.232.64/28@elseif(node.kind === 'root')ip4:204.14.232.64/28@elseip4:204.14.232.64/28@endif 0
│  ├─ @if(node.kind === 'include')ip4:204.14.234.64/28@elseif(node.kind === 'all')ip4:204.14.234.64/28@elseif(node.kind === 'root')ip4:204.14.234.64/28@elseip4:204.14.234.64/28@endif 0
│  ├─ @if(node.kind === 'include')ip4:208.185.229.45@elseif(node.kind === 'all')ip4:208.185.229.45@elseif(node.kind === 'root')ip4:208.185.229.45@elseip4:208.185.229.45@endif 0
│  ├─ @if(node.kind === 'include')ip4:66.170.126.97@elseif(node.kind === 'all')ip4:66.170.126.97@elseif(node.kind === 'root')ip4:66.170.126.97@elseip4:66.170.126.97@endif 0
│  ├─ @if(node.kind === 'include')ip4:216.128.126.97@elseif(node.kind === 'all')ip4:216.128.126.97@elseif(node.kind === 'root')ip4:216.128.126.97@elseip4:216.128.126.97@endif 0
│  ├─ @if(node.kind === 'include')ip4:216.66.217.240/29@elseif(node.kind === 'all')ip4:216.66.217.240/29@elseif(node.kind === 'root')ip4:216.66.217.240/29@elseip4:216.66.217.240/29@endif 0
│  ├─ @if(node.kind === 'include')ip4:208.72.249.240/29@elseif(node.kind === 'all')ip4:208.72.249.240/29@elseif(node.kind === 'root')ip4:208.72.249.240/29@elseip4:208.72.249.240/29@endif 0
│  └─ @if(node.kind === 'include')~all@elseif(node.kind === 'all')~all@elseif(node.kind === 'root')~all@else~all@endif 0
├─ @if(node.kind === 'include')include:sendgrid.net@elseif(node.kind === 'all')include:sendgrid.net@elseif(node.kind === 'root')include:sendgrid.net@elseinclude:sendgrid.net@endif +1
│  ├─ @if(node.kind === 'include')ip4:167.89.0.0/17@elseif(node.kind === 'all')ip4:167.89.0.0/17@elseif(node.kind === 'root')ip4:167.89.0.0/17@elseip4:167.89.0.0/17@endif 0
│  ├─ @if(node.kind === 'include')ip4:208.117.48.0/20@elseif(node.kind === 'all')ip4:208.117.48.0/20@elseif(node.kind === 'root')ip4:208.117.48.0/20@elseip4:208.117.48.0/20@endif 0
│  ├─ @if(node.kind === 'include')ip4:50.31.32.0/19@elseif(node.kind === 'all')ip4:50.31.32.0/19@elseif(node.kind === 'root')ip4:50.31.32.0/19@elseip4:50.31.32.0/19@endif 0
│  ├─ @if(node.kind === 'include')ip4:198.37.144.0/20@elseif(node.kind === 'all')ip4:198.37.144.0/20@elseif(node.kind === 'root')ip4:198.37.144.0/20@elseip4:198.37.144.0/20@endif 0
│  ├─ @if(node.kind === 'include')ip4:198.21.0.0/21@elseif(node.kind === 'all')ip4:198.21.0.0/21@elseif(node.kind === 'root')ip4:198.21.0.0/21@elseip4:198.21.0.0/21@endif 0
│  ├─ @if(node.kind === 'include')ip4:192.254.112.0/20@elseif(node.kind === 'all')ip4:192.254.112.0/20@elseif(node.kind === 'root')ip4:192.254.112.0/20@elseip4:192.254.112.0/20@endif 0
│  ├─ @if(node.kind === 'include')ip4:168.245.0.0/17@elseif(node.kind === 'all')ip4:168.245.0.0/17@elseif(node.kind === 'root')ip4:168.245.0.0/17@elseip4:168.245.0.0/17@endif 0
│  ├─ @if(node.kind === 'include')ip4:149.72.0.0/16@elseif(node.kind === 'all')ip4:149.72.0.0/16@elseif(node.kind === 'root')ip4:149.72.0.0/16@elseip4:149.72.0.0/16@endif 0
│  ├─ @if(node.kind === 'include')ip4:159.183.0.0/16@elseif(node.kind === 'all')ip4:159.183.0.0/16@elseif(node.kind === 'root')ip4:159.183.0.0/16@elseip4:159.183.0.0/16@endif 0
│  ├─ @if(node.kind === 'include')ip4:134.128.64.0/19@elseif(node.kind === 'all')ip4:134.128.64.0/19@elseif(node.kind === 'root')ip4:134.128.64.0/19@elseip4:134.128.64.0/19@endif 0
│  ├─ @if(node.kind === 'include')ip4:134.128.96.0/19@elseif(node.kind === 'all')ip4:134.128.96.0/19@elseif(node.kind === 'root')ip4:134.128.96.0/19@elseip4:134.128.96.0/19@endif 0
│  ├─ @if(node.kind === 'include')include:ab.sendgrid.net@elseif(node.kind === 'all')include:ab.sendgrid.net@elseif(node.kind === 'root')include:ab.sendgrid.net@elseinclude:ab.sendgrid.net@endif +1
│  │  ├─ @if(node.kind === 'include')ip4:223.165.113.0/24@elseif(node.kind === 'all')ip4:223.165.113.0/24@elseif(node.kind === 'root')ip4:223.165.113.0/24@elseip4:223.165.113.0/24@endif 0
│  │  ├─ @if(node.kind === 'include')ip4:223.165.115.0/24@elseif(node.kind === 'all')ip4:223.165.115.0/24@elseif(node.kind === 'root')ip4:223.165.115.0/24@elseip4:223.165.115.0/24@endif 0
│  │  ├─ @if(node.kind === 'include')ip4:223.165.118.0/23@elseif(node.kind === 'all')ip4:223.165.118.0/23@elseif(node.kind === 'root')ip4:223.165.118.0/23@elseip4:223.165.118.0/23@endif 0
│  │  ├─ @if(node.kind === 'include')ip4:223.165.120.0/23@elseif(node.kind === 'all')ip4:223.165.120.0/23@elseif(node.kind === 'root')ip4:223.165.120.0/23@elseip4:223.165.120.0/23@endif 0
│  │  └─ @if(node.kind === 'include')~all@elseif(node.kind === 'all')~all@elseif(node.kind === 'root')~all@else~all@endif 0
│  └─ @if(node.kind === 'include')~all@elseif(node.kind === 'all')~all@elseif(node.kind === 'root')~all@else~all@endif 0
├─ @if(node.kind === 'include')include:aspmx.pardot.com@elseif(node.kind === 'all')include:aspmx.pardot.com@elseif(node.kind === 'root')include:aspmx.pardot.com@elseinclude:aspmx.pardot.com@endif +1
│  ├─ @if(node.kind === 'include')include:et._spf.pardot.com@elseif(node.kind === 'all')include:et._spf.pardot.com@elseif(node.kind === 'root')include:et._spf.pardot.com@elseinclude:et._spf.pardot.com@endif +1
│  │  ├─ @if(node.kind === 'include')ip4:198.245.81.0/24@elseif(node.kind === 'all')ip4:198.245.81.0/24@elseif(node.kind === 'root')ip4:198.245.81.0/24@elseip4:198.245.81.0/24@endif 0
│  │  ├─ @if(node.kind === 'include')ip4:136.147.176.0/24@elseif(node.kind === 'all')ip4:136.147.176.0/24@elseif(node.kind === 'root')ip4:136.147.176.0/24@elseip4:136.147.176.0/24@endif 0
│  │  ├─ @if(node.kind === 'include')ip4:13.111.0.0/16@elseif(node.kind === 'all')ip4:13.111.0.0/16@elseif(node.kind === 'root')ip4:13.111.0.0/16@elseip4:13.111.0.0/16@endif 0
│  │  ├─ @if(node.kind === 'include')ip4:136.147.182.0/24@elseif(node.kind === 'all')ip4:136.147.182.0/24@elseif(node.kind === 'root')ip4:136.147.182.0/24@elseip4:136.147.182.0/24@endif 0
│  │  ├─ @if(node.kind === 'include')ip4:136.147.135.0/24@elseif(node.kind === 'all')ip4:136.147.135.0/24@elseif(node.kind === 'root')ip4:136.147.135.0/24@elseip4:136.147.135.0/24@endif 0
│  │  ├─ @if(node.kind === 'include')ip4:199.122.123.0/24@elseif(node.kind === 'all')ip4:199.122.123.0/24@elseif(node.kind === 'root')ip4:199.122.123.0/24@elseip4:199.122.123.0/24@endif 0
│  │  └─ @if(node.kind === 'include')-all@elseif(node.kind === 'all')-all@elseif(node.kind === 'root')-all@else-all@endif 0
│  └─ @if(node.kind === 'include')-all@elseif(node.kind === 'all')-all@elseif(node.kind === 'root')-all@else-all@endif 0
└─ @if(node.kind === 'include')~all@elseif(node.kind === 'all')~all@elseif(node.kind === 'root')~all@else~all@endif 0
Total DNS lookups9 / 10
Raw TXT record
paypal.com.        3600    IN    TXT    "v=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com include:3ph4._spf.paypal.com include:sendgrid.net include:aspmx.pardot.com ~all"
Guide

Reading an SPF record

SPF (Sender Policy Framework) is a single DNS TXT record that lists which servers are allowed to send mail for your domain. This SPF record checker reads the published v=spf1 value, validates SPF DNS syntax, and explains every mechanism in the sender policy.

The most common failure is the 10-lookup limit: every include, a, mx, ptr, exists and redirect term costs a DNS query, and nested includes count too. Cross 10 and the whole record returns a PermError. The ip4 and ip6 terms are free, so flatten stable includes into ranges where you can.

SPF helps receivers evaluate whether the connecting server is authorized, but it is not a complete anti-spoofing system by itself. Pair SPF with DKIM and a DMARC policy so receivers can also evaluate domain alignment and reporting.

FAQ

Frequently asked questions

What is an SPF record checker?

An SPF record checker validates a domain TXT record that starts with v=spf1. It parses mechanisms such as include, ip4, ip6, a, mx, redirect, and all so you can understand the authorized mail sender policy.

What is the SPF 10 DNS lookup limit?

RFC 7208 caps SPF evaluation at 10 DNS-querying mechanisms, including include, a, mx, ptr, exists, and redirect. Nested includes count toward the same budget; exceeding it causes a PermError.

Should I use ~all or -all?

Start with ~all while confirming every legitimate sender is listed, then move to -all when ready. SPF alone does not guarantee inbox placement, so pair it with DKIM and DMARC alignment.

Why can I only have one SPF record?

Publishing more than one v=spf1 TXT record creates a PermError. Merge all authorized senders into a single SPF record using mechanisms such as include, ip4, ip6, a, and mx.