SPF ends in ?all (neutral)
Check id: spf.all_neutral · fix effort: low
What it means
Your SPF record ends in ?all, which means it takes no position on unknown senders. That gives you almost no protection.
The technical detail
?all yields neutral for unlisted sources. Most receivers treat it like no policy.
How to fix it
- Change
?allto~all(softfail), then-allonce senders are confirmed.
Does your domain have this problem?
Run a free scan, takes about ten seconds.