Curious as to why my Google DMARC is coming back with a fail under SPF. Here is the report:
<?xml version="1.0" encoding="UTF-8" ?>
<feedback>
<report_metadata>
<org_name>google.com</org_name>
<email>noreply-dmarc-support@google.com</email>
<extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
<report_id>3863390516803564136</report_id>
<date_range>
<begin>1636848000</begin>
<end>1636934399</end>
</date_range>
</report_metadata>
<policy_published>
<domain>bXXXXXXXXs.XXXX</domain>
<adkim>r</adkim>
<aspf>r</aspf>
<p>none</p>
<sp>none</sp>
<pct>100</pct>
</policy_published>
<record>
<row>
<source_ip>209.85.XXX.XX</source_ip>
<count>38</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>pass</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>bXXXXXXXXs.XXXX</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>bXXXXXXXXs.XXXX</domain>
<result>pass</result>
<selector>google</selector>
</dkim>
<spf>
<domain>bXXXXXXXXs.XXXX</domain>
<result>pass</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>209.85.XXX.XX</source_ip>
<count>7</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>bXXXXXXXXs.XXXX</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>bXXXXXXXXs.XXXX</domain>
<result>pass</result>
<selector>google</selector>
</dkim>
<spf>
<domain>2XXXXXe.com</domain>
<result>pass</result>
</spf>
</auth_results>
</record>
</feedback>
Here are my relevant settings:
_dmarc: v=DMARC1; p=none; rua=mailto:beans@bloomseeds.farm; sp=none
v=spf1 include:_spf.google.com ~all
It may be worth noting that this only happens in the reports from Google, and none of the other email providers. Also, the emails sent to "2XXXXXe.com" are reports regularly sent from my online store to myself (out of stock alerts, etc.).
TIA.