10pfclose.co.uk

Leading hyphen breaks the SPF record — again

$ dig TXT 10pfclose.co.uk

;; QUESTION SECTION:

;10pfclose.co.uk. IN TXT

;; ANSWER SECTION:

10pfclose.co.uk. 3600 IN TXT "-v=spf1 a ip4:213.171.216.0/24 include:spf.protection.outlook.com ~all"

What Happened

Another SPF record with a leading hyphen: `-v=spf1 a ip4:213...`. The leading dash makes the version string unrecognisable to every mail server on earth. This domain has no functional SPF protection and is fully vulnerable to email spoofing. This is the second example of this exact mistake we have catalogued in the .co.uk zone.

Full TXT Record Value

-v=spf1 a ip4:213.171.216.0/24 include:spf.protection.outlook.com ~all