SPF Lookup
Retrieve the SPF record published in the TXT records of a domain, see what each mechanism allows and check it against the 10-DNS-lookup limit.
- Runs on our servers
- Free to use
- API available →
About this tool
SPF is the first line of e-mail authentication and also the easiest to break: a forgotten include, a typo or one lookup too many silently turns the record into a permanent error. The SPF Lookup fetches the record through the APIVoid SPF Validator API, lists every mechanism with its meaning and qualifier, counts the DNS lookups against the limit of 10 and reports syntax and configuration issues.
Complete the picture with the Email Spoof Check.
How to use it — quick steps
- 01
Enter the domain or hostname
Type or paste the domain or hostname in the field above, for example example.com. Use Ctrl + V to paste.
- 02
Press "Check SPF"
Press "Check SPF" or Ctrl + Enter. The result appears below in a few seconds. Results can be copied.
- 03
Read the result
It appears in the dark panel under the form in a few seconds. Every block has [copy] and other actions.
Key features of this tool
External lookups
The lookup runs from our infrastructure, so you see what the public internet sees without exposing your own IP address or network.
Fast and cached
Results come back in seconds; identical lookups are cached for a few minutes to keep the service fast and responsive for everyone.
Easy to reuse
Every result block can be copied with one click or downloaded as a text file, and tables can also be saved as CSV for your reports.
Frequently asked questions
What is SPF?
Sender Policy Framework: a TXT record (v=spf1 …) listing the servers allowed to send mail for a domain. Receivers compare the sending IP with it and mark mail that fails.
What does the 10-lookup limit mean?
Evaluating include, a, mx, redirect and exists mechanisms costs DNS lookups; more than 10 makes the record permanently fail (permerror) at many receivers. Flatten includes or remove unused ones.
-all or ~all?
-all (fail) tells receivers to reject mail from unlisted servers, ~all (softfail) only marks it; +all allows everyone and offers no protection.
SPF is fine but mail still gets spoofed
SPF alone does not tell receivers to reject failures; add a DMARC policy. The Email Spoof Check combines both.