Email security

SPF within the 10-lookup limit

SPF, DMARC, DKIM, MTA-STS: protection against spoofed mail in your name.

Why it matters

Above 10 DNS lookups SPF evaluation fails with an error, so receivers treat it as absent and your legitimate mail may fail DMARC.

How to fix it

Moderate · a few hours

Remove includes of services you no longer use.
Replace some includes with the ip4:/ip6: ranges they resolve to, or use an SPF flattening service.

Test this now, free: SPF, DMARC & DKIM checker - no sign-up.

How we test it

The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.

Does your domain pass this check?

Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.

Scan your domain free