Free tool

SPF lookup counter.

Ten lookups is the limit. Past it the whole record fails — not partially, entirely — with no bounce and nothing in any log. This counts yours and shows where each one goes.

No account, no card, no limit on how often you run it.

Why this one matters more than it looks

An SPF record that exceeds ten DNS lookups returns a permanent error. Receiving servers treat that as no SPF at all, so your mail starts being filtered and nothing anywhere tells you. The record still reads as correct when you look at it.

It happens gradually. Each include costs a lookup, and whatever that include itself contains costs more. Adding one marketing tool to a record that was on nine takes you over, and nothing about that change looks dangerous.

What to do if you are over

  • Remove senders you no longer use. Most records over the limit contain at least one.
  • Replace an include with the specific ip4 ranges where the sender publishes them, since an IP costs nothing.
  • Move a sender to a subdomain with its own SPF record, which gets its own budget of ten.

The full guide has the order to do these in.

Check everything at once.

One check covering registration, certificates, mail, subdomains and hosting.