SPF Record:
How this check works
The server-side endpoint performs DNS TXT lookups (no browser CORS). The page then extracts records starting with v=spf1 and analyzes mechanisms that cause DNS lookups (for example include:, mx, a, ptr, exists:, redirect=).