SPF Record Checker

SPF helps prevent spoofing by declaring which servers are allowed to send mail for your domain.

Result for equistar.org

Found
v=spf1 ip4:108.174.194.102 ip4:108.174.194.115 ip4:108.174.194.118 ip4:108.174.197.192 ip4:108.174.198.120 ip4:108.174.198.2 ip4:108.174.198.41 ip4:108.174.200.186 ip4:108.174.200.224 ip4:142.11.195.40 ip4:142.11.195.51 ip4:23.254.131.232 ip4:23.254.132.144 ip4:23.254.164.204 ip4:23.254.167.138 ip4:23.254.167.175 ip4:23.254.167.211 ip4:23.254.167.227 ip4:23.254.179.193 ip4:23.254.201.131 ip4:23.254.201.210 ip4:23.254.201.63 ip4:23.254.201.95 ip4:23.254.202.12 ip4:23.254.202.181 ip4:23.254.202.254 ip4:23.254.203.146 ip4:23.254.203.166 ip4:23.254.203.80 ip4:23.254.204.126 ip4:23.254.204.137 ip4:23.254.204.165 ip4:23.254.204.201 ip4:23.254.204.209 ip4:23.254.204.210 ip4:23.254.204.233 ip4:23.254.204.36 ip4:23.254.204.49 ip4:23.254.209.102 ip4:23.254.209.77 ip4:23.254.217.186 ip4:23.254.244.155 ip4:23.254.253.25 include:_spf.google.com ~all

FAQ

What does SPF do?
It tells receiving mail servers which senders are authorized for your domain.
Should I have more than one SPF record?
No, you should publish a single SPF record on the root domain.
What is the difference between ~all and -all?
~all is softfail, -all is hard fail (recommended once configuration is correct).
Why is SPF valid but emails still go to spam?
You also need DKIM and DMARC alignment, plus good sending reputation.
How long does SPF change take?
Depends on DNS TTL and caches, usually minutes to hours.

What is SPF?

SPF is a TXT record like v=spf1 ... that tells receiving mail servers which IPs/providers are allowed to send emails for your domain.

Examples

  • v=spf1 a mx -all - allow servers from A and MX records; deny all others.
  • v=spf1 include:_spf.google.com -all - Google Workspace sending only.
  • v=spf1 include:spf.protection.outlook.com -all - Microsoft 365 sending only.

Common mistakes

  • Multiple SPF records on the same domain (should be one).
  • Too many DNS lookups (SPF has a 10-lookup limit).
  • Using ~all forever (softfail) instead of tightening to -all once ready.