Build a correct SPF record — and audit the one you have. The 10-DNS-lookup limit is counted for real, following nested includes.
all)v=spf1 -all
include, a, mx, ptr, exists and redirect each cost one — nested includes count too. Over the limit → permerror, receivers may reject your mail.v=spf1 records = permerror. Merge providers into a single record.-all (hard fail) is the correct default. ~all is a halfway house; +all authorizes the entire internet to send as you.ptr — deprecated, slow, and unreliable.Lookups run from your browser via DNS-over-HTTPS. Nothing is uploaded.