SPF Checker
Find the published SPF TXT record for a public domain.
Run SPF Checker
Public targets only. No credentials, changes or anonymous active security testing.
What this check does
- Public TXT lookup
- SPF record presence
- Bounded record text
What it does not prove
- No complete recursive SPF evaluation
- No authoritative ten-lookup-budget verdict
- No inbox-placement or reputation verdict
Interpret the returned state
PASS means the endpoint returned evidence within its named boundary. REVIEW, WARN and FAIL must be read alongside that evidence; they are not automatically vulnerabilities. UNKNOWN means the observation could not establish the answer.
Why it matters
SPF describes permitted mail senders. Finding a record does not prove that every sending service is included or that every message authenticates.
Common review questions
- No SPF record is visible.
- More than one policy or an unexpected sender deserves administrator review.
- A policy change can disrupt mail if legitimate senders were not inventoried.
Start an SPF review with the sending services
List the systems that actually send mail for the domain before changing a policy. Do not publish a record copied from another organisation.
Inspect the returned record. Presence is useful, but nested includes, redirects and the DNS lookup limit require deeper evaluation than this endpoint performs.
Confirm policy changes through authorised mail-flow testing and evidence. SPF alone cannot promise delivery or stop every impersonation attempt.
Read the related technical guide →When a fuller review would help
ZENQIX can combine relevant observations, explain priorities and recommend next steps. No automatic remediation, penetration test or complete-security guarantee is included.
Explore Website AssuranceFrom ₹4,999