SPF result: fail

fail means the SPF record explicitly denies this sender — it ends in -all (see the all qualifier) and no earlier mechanism matched the connecting IP. Receivers are expected to treat this as a strong signal, though DMARC (not SPF itself) is what actually decides whether to reject/quarantine the message overall.