SPF include tree

Expand a domain's SPF record and see where its DNS lookups actually go. Every nested include is walked, and each branch shows what it costs in total, so you can tell which one is eating the budget.

4 of 10 lookups

mailgun.org is within the limit.

include:_spf.mailgun.org accounts for 3 of those 4 lookups. If you need to save room, that is where to start: offload one vendor or move it to a subdomain.

The record, expanded

mailgun.org
v=spf1 include:_spf.mailgun.org include:_spf.eu.mailgun.org -all
- include:_spf.mailgun.org 3 lookups
  - _spf.mailgun.org
    v=spf1 include:_spf1.mailgun.org include:_spf2.mailgun.org ~all
    - include:_spf1.mailgun.org 1 lookup
      - _spf1.mailgun.org
        v=spf1 ip4:159.135.224.0/20 ip4:69.72.32.0/20 ip4:204.220.90.0/23 ip4:204.220.92.0/22 ~all
        
        ip4:159.135.224.0/20
        
        ip4:69.72.32.0/20
        
        ip4:204.220.90.0/23
        
        ip4:204.220.92.0/22
        
        ~all
    - include:_spf2.mailgun.org 1 lookup
      - _spf2.mailgun.org
        v=spf1 ip4:161.38.192.0/20 ip4:143.55.224.0/21 ip4:143.55.232.0/22 ip4:159.112.240.0/20 ip4:198.244.48.0/20 ip4:204.220.168.0/21 ip4:204.220.176.0/20 ~all
        
        ip4:161.38.192.0/20
        
        ip4:143.55.224.0/21
        
        ip4:143.55.232.0/22
        
        ip4:159.112.240.0/20
        
        ip4:198.244.48.0/20
        
        ip4:204.220.168.0/21
        
        ip4:204.220.176.0/20
        
        ~all
    - ~all
- include:_spf.eu.mailgun.org 1 lookup
  - _spf.eu.mailgun.org
    v=spf1 ip4:141.193.32.0/23 ip4:159.135.140.80/29 ip4:159.135.132.128/25 ip4:161.38.204.0/22 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:143.55.236.0/22 ip4:198.244.60.0/22 ip4:204.220.160.0/20 ~all
    - ip4:141.193.32.0/23
    - ip4:159.135.140.80/29
    - ip4:159.135.132.128/25
    - ip4:161.38.204.0/22
    - ip4:87.253.232.0/21
    - ip4:185.189.236.0/22
    - ip4:185.211.120.0/22
    - ip4:185.250.236.0/22
    - ip4:143.55.236.0/22
    - ip4:198.244.60.0/22
    - ip4:204.220.160.0/20
    - ~all
- -all

Counts include everything nested beneath a branch, which is how the ten lookup limit is actually applied. To generate a replacement record, check this domain on the home page.