Check a domain’s SPF record
Reads the published SPF record and says what it actually authorises — including the lookup limit, which is the failure people hit without noticing.
The lookup runs in your browser. The domain you type goes to Cloudflare’s DNS resolver and nowhere else — there is no server of ours in between.