Make sure the mail you send is really yours, and provably so.

SPF lists who may send as you, DKIM signs what you send, and DMARC tells receivers what to do when either fails. Check each one, build the records, or run everything at once.

SPF for sending services lookup cost measured by peekip

18 services
ServiceIncludeGoes onLookupsMeasured
Google Workspace_spf.google.comyour domain12026-11-05
Microsoft 365 (Exchange Online)spf.protection.outlook.comyour domain12026-11-05
Zoho Mailzohomail.comyour domain22026-11-05
GoDaddy email and hostingsecureserver.netyour domain32026-11-05
Proton Mail_spf.protonmail.chyour domain22026-11-04
Fastmailspf.messagingengine.comyour domain12026-11-05
iCloud+ Custom Email Domainicloud.comyour domain52026-11-05
Hostinger Email_spf.mail.hostinger.comyour domain32026-11-05
SendGrid (Twilio)sendgrid.neta subdomain22026-11-05
Mailgunmailgun.orgyour domain52026-11-04
Amazon SESamazonses.coma subdomain12026-11-04
Postmarkspf.mtasv.neta subdomain12026-11-01
Marketo Engage (Adobe)mktomail.comyour domain12026-11-05
Zendeskmail.zendesk.comyour domain12026-11-04
Freshdeskemail.freshdesk.comyour domain72026-11-05
OCI Email Delivery (Oracle Cloud)rp.oracleemaildelivery.comyour domain22026-11-05
Cloudflare Email Routing and Email Service_spf.mx.cloudflare.netyour domain12026-11-05
Forward Emailspf.forwardemail.netyour domain52026-11-05

Lookups count the include itself plus everything nested in it (RFC 7208 §4.6.4), measured over DNS-over-HTTPS. Each service’s include is taken from its own documentation, linked on its page.