include:_spf.mx.cloudflare.net – Cloudflare Email Routing

Short answer: include:_spf.mx.cloudflare.net lets Cloudflare Email Routing's mail servers pass SPF for your domain. It costs 1 of the 10 DNS lookups SPF allows (checked live).

ServiceCloudflare Email Routing
Lookups1 of the 10 DNS lookups SPF allows (checked live)
Record now
v=spf1 ip4:104.30.0.0/19 ip6:2405:8100:c000::/38 ~all

Do you need it?

Yes, if you send mail through Cloudflare Email Routing with your own domain. It is the include our Cloudflare Email Routing setup guide uses. Cloudflare creates v=spf1 include:_spf.mx.cloudflare.net ~all and locks it. If you also send as this domain (Gmail "Send mail as", a newsletter tool), that sender has to end up in the same single SPF record.

Who uses it

In our scan of top websites on 23 Oct 2026:

Add it the right way

  1. Keep one SPF record per domain: v=spf1 include:_spf.mx.cloudflare.net ~all, plus your other senders in the same record – SPF generator.
  2. Stay under 10 lookups in total; every include counts, nested ones too.
  3. SPF alone isn't enough for Gmail, Yahoo and Outlook: turn on DKIM and publish DMARC.

Check your domain

After the fix, send a test email to see SPF, DKIM and DMARC pass on a real message, then keep an eye on it: free DMARC monitoring shows every service that sends mail as your domain and which ones fail, in plain English.

Rather not touch DNS? I set up SPF, DKIM and DMARC without breaking your other senders, with a before/after report.

Get it fixed on Fiverr

Prefer to do it yourself? Get the step-by-step Fix Kit ($15) – 28-page guide, checklist, 20+ providers.

Other includes

All 47 SPF includes