SPF Checker
Which mail servers are authorized to send mail as this domain.
This is one independent signal used by the Domain Security Score, and can also be run on its own for any domain.
Based on: RFC 7208 — Sender Policy Framework (SPF)
About this validation
Checks which mail servers are authorized to send mail as a domain.
- Protocol / standard:
- Rules reviewed:
- Sep 6, 2026
SEOTechTests methodology: Data source: a live DNS TXT-record lookup performed by SEOTechTests for an SPF record. Standard: RFC 7208 defines the SPF record syntax and evaluation rules.
Standards and vendor-documented behavior can change. This reflects the source as last reviewed above, not a permanent guarantee.
FAQ
What does an SPF record do?
It's a DNS TXT record listing which mail servers are authorized to send email claiming to be from this domain, so a receiving mail server can reject mail from unauthorized senders spoofing the domain.
Why does SEOTechTests check SPF?
A missing or overly permissive SPF record makes it easier to send convincing phishing email that appears to come from this domain, which is directly relevant to a domain's overall reputation risk.
Does a passing SPF record mean this domain's email is fully protected from spoofing?
No -- SPF alone doesn't protect the visible "From" address shown to recipients; that requires DMARC alignment on top of SPF and/or DKIM, which this site checks separately.
What does it mean if no SPF record is found?
Any mail server can currently send email claiming to be from this domain without SPF flagging it as unauthorized -- a meaningful gap, though not evidence the domain itself is currently being spoofed.