SPF checker

SPF is the first leg of email authentication. The record lists which servers may send for a domain, and the count matters because a receiver gives up with a permanent error once a check passes ten DNS lookups, which silently rejects every message from that domain. This page reads the record, expands every include, a, and mx term, and counts the lookups the way a receiver would. It is an audit, not a full evaluation: there is no sender IP here, macros like %{i}are counted but never expanded, reverse DNS for ptr terms is never resolved, and the DMARC policy, DKIM signatures, and the mail servers themselves are other checks entirely.