Help with SPF and "soft fail"

[kathy1]

Through GoDaddy, we added email security. Since then, lending institutions, specifically, Idaho Central Credit Union, do not receive our emails. They go to SPAM. We are realtors and must get to them. ICCU techs said it was something to do with out SPF and a “soft fail”.
Go Daddy said Cloudfare have our DNS records. This is all greek to me. Please advise. Thank you.

[KianNH]

What’s the domain & what do you use to send emails?

[kathy1]

Our domain is TripleCrownTeam. com and we have emails through Office 365 with GoDaddy. For example, kathy @triplecrownteam.com

[KianNH]

Looks like you currently have multiple SPF records published, you’ll want to flatten them to just the one.

triplecrownteam.com. 300 IN TXT "v=spf1 include:sendgrid.net include:spf.protection.outlook.com -all"
triplecrownteam.com. 300 IN TXT "v=spf1 a:dispatch-us.ppe-hosted.com include:secureserver.net -all"

You can remove both of these and just add as a TXT record, with a name of @ and a value of:

v=spf1 a:dispatch-us.ppe-hosted.com include:secureserver.net include:sendgrid.net include:spf.protection.outlook.com -all

[kathy1]

Where do I go to do this? Thanks!

[epic.network]

You would make the change in the DNS section of your Cloudflare dashboard for your domain. I have included a link to the relevant #tutorial after my reply.

You can remove one of the two existing records and edit the other to contain the following value, which is slightly different than that shared by @KianNH. The reason for my change is prevent redundancy caused by include:secureserver.net containing include:spf1.secureserver.net which in turn contains include:spf.protection.outlook.com.

Your new SPF record:
v=spf1 a:dispatch-us.ppe-hosted.com include:secureserver.net include:sendgrid.net -all

Editing DNS Records

This tutorial covers editing DNS records. Go to the DNS app of your Cloudflare dashboard. Enter your credentials and click ‘Log In’ Click the domain in question On this page, you will see a list of the DNS records for your domain. This page is where you edit them. You will see the list of records like this: [DNS Page] You can click the edit button to the right of any record to change it, then click ‘save’ when you’re done. There is also a tutorial on Adding DNS Records Tutorial Refer…

[kathy1]

I will attach what I see when I go to the DNS app. I do not see anything or a link for DNS Records. Sorry, just so out of my element.

[epic.network]

I concur that the domain does not appear to be in your Cloudflare account.

$ dig ns triplecrownteam.com +short 
ingrid.ns.cloudflare.com.
nile.ns.cloudflare.com.

From the active nameservers we can see that your domain is definitely in someone’s Cloudflare account. Do you use any IT providers that who may have placed it in an account that they manage?

[kathy1]

Our website is going through our real estate brokerage and insiderealestate. - After seeing all this, I wonder if the issue lies with them. I will contact them and see what I can find out. Thank you for your help!