eis-learnrep.co.uk

Missing the `1` in `v=spf1` — the entire record is ignored

$ dig TXT eis-learnrep.co.uk

;; QUESTION SECTION:

;eis-learnrep.co.uk. IN TXT


;; ANSWER SECTION:

eis-learnrep.co.uk. 3600 IN TXT "v=spf ip4:213.171.216.0/24 ip4:213.171.208.0/24 include:spf.protection.outlook.com -all"

The SPF record reads `v=spf ip4:213.171.216.0/24...` — they missed the `1` from `spf1`. Because the version string is not specifically `spf1`, every mail server on earth will silently ignore this record entirely. One character. Completely invisible to the domain owner. Their outbound email is unprotected.

v=spf ip4:213.171.216.0/24 ip4:213.171.208.0/24 include:spf.protection.outlook.com -all