Hover to See the Payload Not Working

Can you please scan your website one more time using this [1].

Let me know if you can see more details there. If yes, then the empty payload in the plugin may be a bug in the code. However, if you cannot see any information about the payload the website linked below, that means the plugin is working as intended and is not showing a payload because there is no payload to show.

[1] https://sitecheck.sucuri.net/

The link you sent says that there’s more than one SPF filter for the domain, but that’s it. No known problems.

Do you think this is a false positive?

Multiple SPF records are usually associated with SPAM.

If you refer to the SPF specifically file, Section 3.2 [1].

Multiple DNS Records: A domain name MUST NOT have multiple records that would cause an authorization check to select more than one record. See Section 4.5 for the selection rules.

That’s the problem that the scanner found.

It is not a false positive in the sense that the scanner is sending you a warning about something that your website is doing wrong, per the technical specification of one of the components involved, in this case DNS.

You can solve this by removing the unnecessary SPF record from your DNS zone file. If you don’t have access to this file, you can ask your hosting provider for support.

[1] https://tools.ietf.org/html/rfc7208#section-3.2

Perfect! I’ll do that. Thanks so much for the help and the fantastic plugin.