SPF
nasa.gov
9 of 10 DNS lookups
Inside the limit, with 1 to spare.
Include tree
nasa.gov9 lookups
v=spf1 include:_spf-4a.nasa.gov include:_spf-4b.nasa.gov include:_spf-4c.nasa.gov include:_spf-4d.nasa.gov include:_spf-4g.nasa.gov include:_spf-4m.nasa.gov include:_spf-4x.nasa.gov include:_spf-6a.nasa.gov include:spf.protection.outlook.com -all
_spf-4a.nasa.gov0 lookups
v=spf1 ip4:198.117.0.161 ip4:198.117.0.162 ip4:198.117.1.161 ip4:198.117.1.162 ip4:136.178.240.5 ip4:136.178.47.20 ip4:192.92.190.0/24 ip4:192.92.191.0/24 ip4:192.92.192.0/24 -all
_spf-4b.nasa.gov0 lookups
v=spf1 ip4:128.102.12.121 ip4:128.102.12.122 ip4:130.134.81.136 ip4:128.156.250.70 ip4:128.183.245.24 ip4:128.102.12.131 ip4:128.102.12.132 ip4:128.102.12.133 ip4:128.102.3.200 ip4:128.102.22.46 ip4:128.102.12.20 ip4:143.232.190.164 -all
_spf-4c.nasa.gov0 lookups
v=spf1 ip4:128.157.183.13 ip4:198.117.132.19 ip4:148.114.252.16 ip4:198.116.134.103 ip4:128.159.63.152 ip4:198.117.0.201 ip4:198.117.0.214 ip4:198.117.0.215 ip4:198.117.0.216 ip4:198.117.1.201 ip4:198.117.1.214 ip4:198.117.1.215 ip4:198.117.1.216 -all
_spf-4d.nasa.gov0 lookups
v=spf1 ip4:198.117.0.151 ip4:198.117.0.152 ip4:198.117.0.153 ip4:198.117.0.154 ip4:198.117.1.151 ip4:198.117.1.152 ip4:198.117.1.153 ip4:198.117.1.154 ip4:198.117.0.202 ip4:198.117.1.202 -all
_spf-4g.nasa.gov0 lookups
v=spf1 ip4:128.183.210.99 ip4:169.154.216.33 ip4:169.154.217.17 ip4:128.183.16.133 ip4:128.183.16.143 ip4:128.183.96.236 ip4:169.154.156.35 ip4:169.154.156.36 ip4:128.183.31.23 ip4:198.118.114.180/30 ip4:198.118.195.99 -all
_spf-4m.nasa.gov0 lookups
v=spf1 ip4:129.165.41.104 ip4:129.165.43.104 ip4:129.165.92.46 ip4:129.165.92.62 ip4:129.165.43.118 ip4:129.165.41.118 ip4:129.165.43.119 ip4:129.165.43.120 ip4:150.144.200.16 ip4:150.144.200.48 ip4:198.118.192.20 ip4:198.118.196.16 -all
_spf-4x.nasa.gov0 lookups
v=spf1 ip4:198.116.65.188 ip4:198.119.134.205 ip4:128.156.249.229 ip4:128.149.137.96 ip4:128.149.139.105 ip4:128.149.139.106 ip4:128.149.139.109 ip4:169.154.146.140 ip4:169.154.146.141 ip4:129.164.30.24 -all
_spf-6a.nasa.gov0 lookups
v=spf1 ip6:2001:4d0:8302:1100::151 ip6:2001:4d0:8302:1100::152 ip6:2001:4d0:8302:1100::153 ip6:2001:4d0:8302:1100::154 ip6:2001:4d0:a302:1100::151 ip6:2001:4d0:a302:1100::152 ip6:2001:4d0:a302:1100::153 ip6:2001:4d0:a302:1100::154 -all
spf.protection.outlook.com0 lookups
v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all
Every include: is followed. The count on each row is what that record spends on its own; the total is the sum of the whole tree, which is what a receiver actually charges you.
Flattened record
The same senders, with every include: replaced by the literal ranges it resolves to right now — 83 IPv4 and 13 IPv6 ranges, costing 0 lookups instead of 9.
v=spf1 ip4:198.117.0.161 ip4:198.117.0.162 ip4:198.117.1.161 ip4:198.117.1.162 ip4:136.178.240.5 ip4:136.178.47.20 ip4:192.92.190.0/24 ip4:192.92.191.0/24 ip4:192.92.192.0/24 ip4:128.102.12.121 ip4:128.102.12.122 ip4:130.134.81.136 ip4:128.156.250.70 ip4:128.183.245.24 ip4:128.102.12.131 ip4:128.102.12.132 ip4:128.102.12.133 ip4:128.102.3.200 ip4:128.102.22.46 ip4:128.102.12.20 ip4:143.232.190.164 ip4:128.157.183.13 ip4:198.117.132.19 ip4:148.114.252.16 ip4:198.116.134.103 ip4:128.159.63.152 ip4:198.117.0.201 ip4:198.117.0.214 ip4:198.117.0.215 ip4:198.117.0.216 ip4:198.117.1.201 ip4:198.117.1.214 ip4:198.117.1.215 ip4:198.117.1.216 ip4:198.117.0.151 ip4:198.117.0.152 ip4:198.117.0.153 ip4:198.117.0.154 ip4:198.117.1.151 ip4:198.117.1.152 ip4:198.117.1.153 ip4:198.117.1.154 ip4:198.117.0.202 ip4:198.117.1.202 ip4:128.183.210.99 ip4:169.154.216.33 ip4:169.154.217.17 ip4:128.183.16.133 ip4:128.183.16.143 ip4:128.183.96.236 ip4:169.154.156.35 ip4:169.154.156.36 ip4:128.183.31.23 ip4:198.118.114.180/30 ip4:198.118.195.99 ip4:129.165.41.104 ip4:129.165.43.104 ip4:129.165.92.46 ip4:129.165.92.62 ip4:129.165.43.118 ip4:129.165.41.118 ip4:129.165.43.119 ip4:129.165.43.120 ip4:150.144.200.16 ip4:150.144.200.48 ip4:198.118.192.20 ip4:198.118.196.16 ip4:198.116.65.188 ip4:198.119.134.205 ip4:128.156.249.229 ip4:128.149.137.96 ip4:128.149.139.105 ip4:128.149.139.106 ip4:128.149.139.109 ip4:169.154.146.140 ip4:169.154.146.141 ip4:129.164.30.24 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2001:4d0:8302:1100::151 ip6:2001:4d0:8302:1100::152 ip6:2001:4d0:8302:1100::153 ip6:2001:4d0:8302:1100::154 ip6:2001:4d0:a302:1100::151 ip6:2001:4d0:a302:1100::152 ip6:2001:4d0:a302:1100::153 ip6:2001:4d0:a302:1100::154 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all
Flattening is a trade, not a free win. It freezes your providers' address ranges at this moment. When Google or Mailchimp next adds a sending range, their include: would have picked it up automatically and this copy will not — so mail from the new range fails SPF, quietly, weeks later. Use it when you have genuinely run out of lookups, and regenerate it whenever a provider changes.
This record is 1920 bytes. A single TXT string caps at 255, so your DNS host must split it into several strings — most do this automatically, but check that yours has.
See DMARC, DKIM, registration and the rest for this domain.
Full report