SPF Record Checker

SPF helps prevent spoofing by declaring which servers are allowed to send mail for your domain.

Result for bandbaccounting.com

Found
v=spf1 a:dns.bandbaccounting.com ip4:51.83.139.29 ip4:51.83.139.34 ip4:51.83.147.181 ip4:51.83.147.184 ip4:57.128.253.201 ip4:119.235.253.181 ip4:119.235.253.185 ip4:119.235.253.186 ip4:119.235.253.187 ip4:119.235.253.227 ip4:104.171.114.236 ip4:104.171.114.237 ip4:139.64.172.26 ip4:139.64.172.36 ip4:192.198.94.235 ip4:192.198.94.241 ip4:192.198.94.248 ip4:147.161.3.141 ip4:147.161.3.142 ip4:147.161.3.143 ip4:147.161.3.144 ip4:147.161.3.145 ip4:193.32.161.3 ip4:193.32.161.4 ip4:193.32.161.5 ip4:193.32.161.6 ip4:193.32.161.7 ip4:38.127.61.11 ip4:38.127.61.111 ip4:38.127.61.112 ip4:38.127.61.113 ip4:38.127.61.114 ip4:5.135.19.69 ip4:51.254.157.40 ip4:51.254.157.41 ip4:51.254.157.42 ip4:51.254.157.43 ip4:66.219.106.100 ip4:66.219.106.101 ip4:66.219.106.102 ip4:66.219.106.103 ip4:66.219.106.104 ip4:66.219.106.105 ip4:91.232.28.242 ip4:91.232.28.243 ip4:91.232.28.244 ip4:91.232.28.245 ip4:91.232.28.246 ip4:91.223.3.140 ip4:95.214.53.9 ip4:95.214.53.66 ip4:95.214.53.134 ip4:95.214.53.217 ~all

FAQ

What does SPF do?
It tells receiving mail servers which senders are authorized for your domain.
Should I have more than one SPF record?
No, you should publish a single SPF record on the root domain.
What is the difference between ~all and -all?
~all is softfail, -all is hard fail (recommended once configuration is correct).
Why is SPF valid but emails still go to spam?
You also need DKIM and DMARC alignment, plus good sending reputation.
How long does SPF change take?
Depends on DNS TTL and caches, usually minutes to hours.

What is SPF?

SPF is a TXT record like v=spf1 ... that tells receiving mail servers which IPs/providers are allowed to send emails for your domain.

Examples

  • v=spf1 a mx -all - allow servers from A and MX records; deny all others.
  • v=spf1 include:_spf.google.com -all - Google Workspace sending only.
  • v=spf1 include:spf.protection.outlook.com -all - Microsoft 365 sending only.

Common mistakes

  • Multiple SPF records on the same domain (should be one).
  • Too many DNS lookups (SPF has a 10-lookup limit).
  • Using ~all forever (softfail) instead of tightening to -all once ready.