Does SPF prevent domain spoofing?

No. SPF only protects the envelope from. Attackers can still spoof the header from, which is what users see.

Was this answer helpful?

Thanks for your feedback!