Inspect

SPF Surveyor: see your whole SPF chain as a tree

An SPF record is one line of text that hides a whole tree of other records behind its includes. SPF Surveyor draws that tree so you can see every branch, which vendor each one belongs to, and where the lookups are going.

Where to find it

Inspect → DNS Inspector → SPF Surveyor

How to read it

Your domain's record is the root. Every include: and redirect= becomes a branch, followed recursively down to the actual IP ranges. Common vendors (Google Workspace, Microsoft 365, Salesforce, Mailchimp and others) are recognised and labelled, so a branch you don't recognise stands out.

What to look for

• Branches you don't recognise. A vendor nobody uses any more, or an include someone added and forgot. Each one costs lookups you may need.
• Deep nesting. Some vendors' includes contain four or five levels. That's where the 10-lookup limit gets eaten.
• Duplicates. The same include reached by two paths still counts twice.

If the tree shows you're at or over 10 lookups, Smart SPF flattens it into a single hosted include that stays under the limit.