This is an example of what DNS digest looks like. Sign up to see your own domain's digest.
samplecorp.com
Outbound Email

SPF (3)

SPF records define which email servers are allowed to send emails from samplecorp.com. This helps prevent bad actors from spoofing emails as coming from your domain.

samplecorp.com
"v=spf1 a mx include:amazonses.com include:_spf.google.com include:spf.protection.outlook.com include:mail.zendesk.com include:sendgrid.net ~all"
?
When is this SPF record used?

When an email's Return-Path domain is samplecorp.com or the Return-Path domain's SPF record contains include:samplecorp.com.

?
What are the SPF validation rules?
8 rules will be followed in this order to determine if the email is valid.
  1. Does the originating IP address match the IP of an A record of samplecorp.com?
    Validated!
  2. Otherwise, does the originating IP address match the IP of an MX record of samplecorp.com?
    Validated!
  3. Otherwise, does the SPF record of amazonses.com validate?
    Validated!
  4. Otherwise, does the SPF record of _spf.google.com validate?
    Validated!
  5. Otherwise, does the SPF record of spf.protection.outlook.com validate?
    Validated!
  6. Otherwise, does the SPF record of mail.zendesk.com validate?
    Validated!
  7. Otherwise, does the SPF record of sendgrid.net validate?
    Validated!
  8. Otherwise, for all other emails:
    Accept suspiciously (e.g. send to spam).
?
How many lookups are in this SPF record?
11 lookups. You're over the limit of 10. ⚠
  1. a counts as a lookup.
  2. mx counts as a lookup.
  3. include:amazonses.com counts as a lookup.
  4. include:_spf.google.com counts as a lookup.
  5.     include:_netblocks.google.com counts as a lookup.
  6.     include:_netblocks2.google.com counts as a lookup.
  7.     include:_netblocks3.google.com counts as a lookup.
  8. include:spf.protection.outlook.com counts as a lookup.
  9. include:mail.zendesk.com counts as a lookup.
  10. include:sendgrid.net counts as a lookup.
  11.     include:ab.sendgrid.net counts as a lookup.
email.samplecorp.com
"v=spf1 a mx include:_spf.google.com include:spf.protection.outlook.com -all"
?
When is this SPF record used?

When an email's Return-Path domain is email.samplecorp.com or the Return-Path domain's SPF record contains include:email.samplecorp.com.

?
What are the SPF validation rules?
5 rules will be followed in this order to determine if the email is valid.
  1. Does the originating IP address match the IP of an A record of email.samplecorp.com?
    Validated!
  2. Otherwise, does the originating IP address match the IP of an MX record of email.samplecorp.com?
    Validated!
  3. Otherwise, does the SPF record of _spf.google.com validate?
    Validated!
  4. Otherwise, does the SPF record of spf.protection.outlook.com validate?
    Validated!
  5. Otherwise, for all other emails:
    Reject it.
?
How many lookups are in this SPF record?
7 lookups. Your SPF record is under the limit of 10.
  1. a counts as a lookup.
  2. mx counts as a lookup.
  3. include:_spf.google.com counts as a lookup.
  4.     include:_netblocks.google.com counts as a lookup.
  5.     include:_netblocks2.google.com counts as a lookup.
  6.     include:_netblocks3.google.com counts as a lookup.
  7. include:spf.protection.outlook.com counts as a lookup.
pm-bounces.samplecorp.com
maps to
pm.mtasv.net
v=spf1 include:spf.mtasv.net -all
?
When is this SPF record used?

When an email's Return-Path domain is pm-bounces.samplecorp.com or the Return-Path domain's SPF record contains include:pm-bounces.samplecorp.com.

?
How is this an SPF record?

This is a CNAME record that maps a custom Return-Path from your domain to the SPF record at pm.mtasv.net.

?
What are the SPF validation rules?
2 rules will be followed in this order to determine if the email is valid.
  1. Does the SPF record of spf.mtasv.net validate?
    Validated!
  2. Otherwise, for all other emails:
    Reject it.
?
How many lookups are in this SPF record?
1 lookup. Your SPF record is under the limit of 10.
  1. include:spf.mtasv.net counts as a lookup.

DnsDigest doesn't work on smaller browser widths.

I get it. It's 2025. You should be able to do anything on your phone or tablet that you can do on your laptop.

Except this site. I think the design is best left for wider screens. Besides who wants to look at DNS records on a tiny screen?

So rest easy for now and load us up when you're back at your desk!

Ka Wai Cheung
Creator of DnsDigest

Helpful?
Try DnsDigest for more!