SPF.Guru

SPF checker

Evaluate a domain's SPF record the way a receiving mail server does. Every mechanism, DNS lookup and macro expansion is shown, so you can see not just the verdict but where it came from.

A bare domain works too

IPv4 or IPv6

Defaults to the sender domain

Evaluated instead of the published record, so you can test one before publishing it. Includes inside it still resolve live.

This is a preview. The record below was evaluated instead of what mailgun.org publishes today, so it shows what would happen once you publish it.

v=spf1 exists:i.%{ir}._d.%{d}.my.spf.guru -all include:_spf.mailgun.org include:_spf.eu.mailgun.org

fail

The sending IP is not authorised, and the domain says to reject.

DNS terms used
1 of 10
Void lookups
1 of 2
DNS queries
1
Elapsed
524 ms

How it was evaluated

  1. exists:i.%{ir}._d.%{d}.my.spf.guru no match
    • expands to i.1.2.0.192._d.mailgun.org.my.spf.guru
  2. -all fail

DNS queries

NameTypeResultSourceTime
i.1.2.0.192._d.mailgun.org.my.spf.guru A NOERROR void dns 523.7 ms

Answers marked shared cache came from a recent check by someone else and cost no network round trip; cache means the same name was needed twice within this one evaluation. Entries expire after a minute, so if you have just changed a record, allow that long before the change shows here.