Free tool

Free SPF record checker

Use this SPF checker to look up a domain's SPF record, catch duplicate records, and see how many DNS lookups it uses against the limit of 10 before a cold email launch.

This checks SPF record for one domain. For a real launch verdict, run every domain, inbox, and tracking domain through the full QA pass.

Runs live in your browser via public DNS. Nothing is stored.

Keep one SPF mistake from delaying a client launch

An SPF failure should create one clear owner action before a client workspace goes live. Find the broken record, make the smallest safe DNS change, then run the check again so the approval record shows what changed and what passed.

How to read the result

A launch-ready domain has exactly one SPF record that starts with v=spf1 and stays under 10 DNS lookups. The checker flags two common blockers for cold email setup: duplicate SPF records and too many lookup mechanisms.

The lookup-count module follows include: and redirect= chains so the result is closer to what receivers evaluate, not just the visible mechanisms in the top-level record. Seven or more lookups is a warning; more than 10 is a Do Not Launch issue.

If you are over the limit, the fix is usually to flatten or remove unused includes, move non-campaign senders to another domain, or consolidate sending services before the outbound launch goes live.

What this check does not catch

A passing SPF record lookup is useful, but it is not launch signoff. Cold email campaigns still fail when adjacent records, tracking domains, or inbox-level settings are broken.

DKIM selector setup

DMARC alignment

MX readiness

tracking-domain SSL

blacklist status

domain age

Setup guides for this check

Read the setup notes behind this result, then verify the neighboring records before launch.

SPF for cold email

The exactly-one-record rule, the 10 DNS lookup limit, and the SPF mistakes that block a launch.

DMARC for cold email

Policies, alignment, rua reports, and the Gmail and Yahoo requirement that made DMARC mandatory.

Google and Yahoo bulk sender requirements

SPF, DKIM, DMARC, one-click unsubscribe, and the spam-rate thresholds bulk senders must meet.

Need to check a full outbound workspace?

OutboundQA checks every domain, inbox, and tracking domain in the workspace, then gives you a shareable report with a Ready, Needs Fix, or Do Not Launch verdict.

Run a free workspace check View a sample report

Cold email launch checks to run next

Use this result as one checkpoint in the launch flow. Then verify the neighboring records and run the combined domain check before the outbound launch goes live.

DMARC Checker

Look up a domain's DMARC record and read its policy in plain English.

DKIM Checker

Look up a domain's DKIM selector and confirm the public key exists.

Auth Checker

Run SPF, DKIM, and DMARC together for a sending domain before launch.

MX Checker

Look up a domain's MX records and detect the mail provider.

Blacklist Checker

Check a domain and sampled mail server IPs against domain and email blocklists.

Reputation Checker

Check observable cold email reputation risks across age, blacklist, authentication, MX, and HTTPS signals.

Deliverability Checker

Check observable cold email infrastructure readiness across MX, SPF, DKIM, DMARC, blacklist, age, tracking-domain, and SMTP egress identity signals.

Receiver Checker

Check observable Gmail, Yahoo, and Microsoft sender requirements from public DNS and optional pasted message headers.

Recipient Preflight

Paste emails or domains and classify MX provider, free inboxes, security gateways, SPF, DMARC, and receive-mail readiness.

Tracking Checker

Check a branded cold email tracking domain for CNAME setup, DNS resolution, HTTPS, and redirect handoff.

MTA-STS Checker

Check MTA-STS and TLS-RPT records for inbound mail security posture before a cold email launch.

PTR/rDNS Checker

Check a custom SMTP egress IP for PTR, reverse DNS, and forward-confirmed rDNS before launch.

Launch Checklist

Generate a pre-launch QA checklist for domains, inboxes, authentication, tracking domains, blacklist checks, and signoff.

Domain Checker

Run MX, SPF, and DMARC in one pass for a quick readiness verdict on a sending domain.

Burn History

Check whether a domain has already sent cold email, carried a tracking hostname, or picked up a listing, before you buy it.

Sample Launch QA Report

See the report founders, teams, and agencies can share after the full QA pass.

Email Deliverability Tool

See how one-off checks turn into pre-launch QA for full cold email workspaces.

Questions

SPF (Sender Policy Framework) is a DNS TXT record that lists which servers are allowed to send mail for your domain. Receivers check it to decide whether your mail is legitimate.

SPF allows at most 10 DNS lookups when it evaluates includes, a, mx, exists, and redirect mechanisms. Go over 10 and SPF returns permerror, which can fail authentication. Cold email stacks hit this fast because each tool adds an include.

No. A domain must have exactly one SPF record. Two or more is a misconfiguration that fails SPF. Merge them into a single record.

Pause the affected launch, identify the owner of the sending record, and remove the duplicate record or unused sending include. Run a fresh check after the DNS change, then record the result with the client launch evidence.

More free tools

DMARC