dnsbl: dnsbl.dkim.conf comparison

comparison dnsbl.dkim.conf @ 467:f5b394bec28c

allow checking names without A records on uribl lists; improve extraction of fake TLDs from our RPZ zone

author	Carl Byington <carl@five-ten-sg.com>
date	Wed, 16 Dec 2020 10:25:37 -0800
parents	8ad675a5d448
children

comparison

equal deleted inserted replaced

-:8ad675a5d448
+:f5b394bec28c
+163.com                         unsigned_black  163.com;
 aim.com                         unsigned_black  "aim.com,mx.aim.com";
 aol.com                         unsigned_black  "aol.com,mx.aol.com";
 aol.de                          unsigned_black  aol.de;
 aol.fr                          unsigned_black  aol.fr;
 emailbuybuybaby.com             unsigned_black  emailbuybuybaby.com;
 federalreserve.com              unsigned_black  federalreserve.com;
 jusmisiones.gov.ar              unsigned_black  jusmisiones.gov.ar;
+mail.com                        unsigned_black  mail.com;
 my.com                          unsigned_black  my.com;
+outlook.com                     unsigned_black  outlook.com;
+qq.com                          unsigned_black  qq.com;
 westernunion.com                unsigned_black  westernunion.com;
 yahoo.ca                        unsigned_black  yahoo.ca;
 yahoo.co.in                     unsigned_black  yahoo.co.in;
 yahoo.co.jp                     unsigned_black  "yahoo.com,yahoo.co.jp";
 yahoo.com.my                    unsigned_black  yahoo.com.my;
 #
 1039rxp.com                     require_signed  1039rxp-com.20150623.gappssmtp.com;
 10news.com                      require_signed  ewscripps.onmicrosoft.com;
 123g.info                       require_signed  123g.info;
 123greetings.biz                require_signed  123greetings.biz;
+123greetings.com                require_signed  123greetings.com;
 123greetings.info               require_signed  123greetings.info;
 123rf.com                       require_signed  "123rf.com,123rf-com.20150623.gappssmtp.com";
 160over90.com                   require_signed  160over90.onmicrosoft.com;
+1800gotjunk.com                 require_signed  1800gotjunk.com;
+180la.com                       require_signed  "180la.com;ptr:pphosted.com";   // no dkim signatures, but should pass strong spf check, mail arrives from pphosted
 1and1.com                       require_signed  1and1.com;
 1stimpressioncom.com            require_signed  becausewearewomen.ccsend.com;
 247cpe.com                      require_signed  247cpe.com;
 24hrcares.com                   require_signed  24hrcares.onmicrosoft.com;
 24petwatch.com                  require_signed  24petwatch.com;
 2600hz.com                      require_signed  2600hz.com;
-314action.com                   signed_white    bounce.bluestatedigital.com;
-314action.org                   signed_white    bounce.bluestatedigital.com;
 4imprint.com                    require_signed  4imprint.com;
 4over4.com                      require_signed  4over4.ccsend.com;
 4over.com                       signed_white    "carrier.4over.com,4over-com.20150623.gappssmtp.com";   // some unsigned mail
 7milesglobal.com                require_signed  7milesglobal-com.20150623.gappssmtp.com;
 8x8.com                         require_signed  8x8.com;
 a1.hilton.com                   require_signed  a1.hilton.com;
 a4m.org                         require_signed  sendgrid.info;
 aaabrasives.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 aaas.sciencepubs.org            require_signed  aaas.sciencepubs.org;
-aa.com                          require_signed  "aa.com,amrcorp.onmicrosoft.com";
+aa.com                          require_signed  aa.com;
 aadvantage.email.aa.com         require_signed  aadvantage.email.aa.com;
 aaepa.com                       require_signed  "aaepa.onmicrosoft.com,americanacademytraining.com";
 aaj.bulletinmedia.com           require_signed  bulletinmedia.com;
 aaj.custombriefings.com         require_signed  custombriefings.com;
 aapromo.email.aa.com            require_signed  aapromo.email.aa.com;
+aaslh.org                       require_signed  "aaslh.org,amazonses.com";
 aavacations.email.aa.com        require_signed  aavacations.email.aa.com;
 abbeypress.com                  require_signed  abbeypress.com;
 abc.com                         require_signed  twdc.onmicrosoft.com;
 abcomrents.com                  require_signed  abcomrents.com;
+abesofmaine.com                 require_signed  abesofmaine-com.20150623.gappssmtp.com;
 abingtonaesthetic.com           require_signed  "yahoo.com,em.secureserver.net";
 abms.org                        require_signed  abmsref.onmicrosoft.com;
 abqchamber.com                  require_signed  icontactmail4.com;
 abt.com                         require_signed  abt-com.20150623.gappssmtp.com;
 abusheroriginal.com             require_signed  netorgft2197093.onmicrosoft.com;
+ac2.cheaptickets.com            require_signed  ac2.cheaptickets.com;
 academia-mail.com               require_signed  academia-mail.com;
 access-investments.com          require_signed  access-investments.com;
 acclivitysoftware.com           require_signed  acclivitysoftware.com;
 account.blinkist.com            require_signed  account.blinkist.com;
 accountemps.com                 require_signed  roberthalf.onmicrosoft.com;
 accountmanageremail.com         require_signed  accountmanageremail.com;
 account-nvidia.com              require_signed  account-nvidia.com;
 account.pinterest.com           require_signed  account.pinterest.com;
 accountprotection.microsoft.com require_signed  accountprotection.microsoft.com;
 account.sears.com               require_signed  account.sears.com;
-accounts.google.com             require_signed  "google.com,accounts.google.com";
+accounts.google.com             require_signed  accounts.google.com;
 accounts.paperlesspost.com      require_signed  "paperlesspost.com,*.paperlesspost.com";
 accuspeechmobile.com            require_signed  netorg112606.onmicrosoft.com;
 accutechdata.com                require_signed  "accutechdata.com,accutechdatasupplies.onmicrosoft.com";
 acgov.org                       require_signed  acgov-org.20150623.gappssmtp.com;
 aclu.org                        require_signed  "aclu.org,email.aclu.org";
 adexchanger.com                 require_signed  adexchanger.com;
 adglow.com                      require_signed  adglow.com;
 adidasus-news.adidas.com        require_signed  adidasus-news.adidas.com;
 adlarge.com                     require_signed  adlarge.com;
 admarketing.yahoo.com           require_signed  admarketing.yahoo.com;
-adobe.com                       require_signed  "adobe.com,mktomail.com";
+adobe.com                       require_signed  adobe.com;
 adolescent.nyc                  require_signed  "cmail19.com,cmail20.com";
 adparlor.com                    require_signed  adparlor.com;
-adp.com                         require_signed  "adp.com,*.adp.com";
+adp.com                         require_signed  adp.com;
 adrianacurcio.com               require_signed  emlr2.com;
 adroll.com                      require_signed  adroll.com;
 adroptions.com                  require_signed  adroptions.ccsend.com;
 adr.org                         require_signed  adr.org;
+adswerve.com                    require_signed  adswerve.com;
 adt.com                         require_signed  adtcom.onmicrosoft.com;
+adtheorent.com                  require_signed  "adtheorent.com,sendgrid.net";
 advancement.villanova.edu       require_signed  advancement.villanova.edu;
 advantageescrow.net             require_signed  advantageescrow.net;
+advertisingweek.com             require_signed  advertisingweek.com;
 adviserinvestments.com          require_signed  adviserinvestments.com;
 adv.strawberrynet.com           require_signed  adv.strawberrynet.com;
 a.email.hbr.org                 require_signed  a.email.hbr.org;
+aenetworks.com                  require_signed  aenetworks.com;    // no dkim signature, but passes strong spf
 aexp.com                        require_signed  aexp.com;
 afar.com                        require_signed  afar.com
 aflac-email.com                 require_signed  aflac-email.com;
 aflac-onlineservices.com        require_signed  aflac-onlineservices.com;
 afsc.org                        require_signed  afsc.org;
 alerts.aviatormastercard.com    require_signed  alerts.aviatormastercard.com;
 alerts.barclaycardus.com        require_signed  alerts.barclaycardus.com;
 alerts.comcast.net              signed_white    alerts.comcast.net;             // comcast internal forwarding breaks their own signatures
 alerts.offers.com               require_signed  "alerts.offers.com,email.offers.com";
 alertsp.chase.com               require_signed  alertsp.chase.com;
+alertsp.com                     require_signed  alertsp.com;
 alerts.santander.us             require_signed  alerts.santander.us;
 alerts.skype.com                require_signed  alerts.skype.com;
 alerts.trulia.com               require_signed  alerts.trulia.com;
 alerts.usbank.com               require_signed  alerts.usbank.com;
 alexandani.com                  require_signed  alexandani.com;
-alignable.com                   require_signed  "alignable.com,invites.alignable.com";
+alignable.com                   require_signed  "alignable.com,*.alignable.com";
 allaboutjazz.com                require_signed  allaboutjazz.com;
 allianceforaction.com           signed_white    allianceforaction.ccsend.com    // some unsigned mail from their servers, no spf
 alliedmg.biz                    require_signed  alliedmg.biz;
 allinoneline.com                require_signed  allinoneline.ccsend.com;
-allstarbaseballacademy.com      require_signed  "allstarbaseballacademy-com.20150623.gappssmtp.com,allstarbaseballacademy.ccsend.com";
+allstarbaseballacademy.com      require_signed  "allstarbaseballacademy-com.20150623.gappssmtp.com,allstarbaseballacademy.ccsend.com;include:_spf.salesforce.com";
 allstarnutrition.us             signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 allstate.com                    signed_white    allstate.com;                   // some unsigned mail via allstate-mail.com not listed in their spf record
 alm.com                         require_signed  "e.alm.com,experiture.com";
 almo.com                        require_signed  icontactmail1.com;
 alpha.gr                        require_signed  alpha.gr;                       // unsigned but passes spf -all
+alphastaff.com                  require_signed  "alphastaffportal.onmicrosoft.com,auth.ccsend.com,amazonses.com;ptr:hrpyramid.net";
 alpineescrow.net                require_signed  alpineescrowarrowhead.onmicrosoft.com;
 alro.com                        require_signed  "alro.com,alrocorp.onmicrosoft.com";
 altramotion.com                 require_signed  ptgnet4.onmicrosoft.com;
 alumniclass.com                 require_signed  alumniclass.com;
 alumniclubs.columbia.edu        require_signed  "alumniclubs.columbia.edu,columbiabusiness.onmicrosoft.com";
-alumni.nd.edu                   require_signed  "nd.edu,imodules.com";
+alumni.nd.edu                   require_signed  "nd.edu,imodules.com;ptr:nd.edu";
 alz.org                         require_signed  "alz-org.20150623.gappssmtp.com,mta-bbcspool.convio.net,auth.ccsend.com";
 amalosangeles.org               require_signed  amalosangeles.org;
 amazoncapital.com               require_signed  amazon.com;
 amazon.ca                       require_signed  amazon.ca;
 amazon.com                      require_signed  amazon.com;
 amazon.fr                       require_signed  amazon.fr;
 amazonsellerservices.com        require_signed  amazonsellerservices.com;
-amcnetworks.com                 require_signed  "amcnetworks.com,amcnetworks.onmicrosoft.com";
+amcnetworks.com                 require_signed  amcnetworks.com;
 amcp.bulletinhealthcare.com     require_signed  bulletinhealthcare.com;
 amcp.custombriefings.com        require_signed  custombriefings.com;
 amcustomercare.att-mail.com     require_signed  amcustomercare.att-mail.com;
 americangreetings.com           require_signed  americangreetings.com;
 americanhotel.com               require_signed  americanhotel.com;
 americansuspension.com          require_signed  "store.smtp.bigcommerce.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+americantargetnetwork.com       require_signed  imgcteam.onmicrosoft.com;       // mbmg client
 americaslibertypac.com          require_signed  bluehornet.com;
 ameritas.com                    require_signed  "*.memberemail.com";
 amleo.com                       require_signed  amleo.com;
+ampersand.tv                    require_signed  nccmedia.onmicrosoft.com;
 amrevmuseum.org                 signed_white    "amrevmuseum.onmicrosoft.com,americanrevolutioncenter.ccsend.com,mta-bbcspool.convio.net";  // some unsigned mail via blackbaud
 ams-cc.com                      require_signed  ams-cc.com;
 am.sony.com                     signed_white    sony.onmicrosoft.com;           // some unsigned mail via lightpath
 a.narrativemagazine.com         require_signed  a.narrativemagazine.com;
 anatbanielmethod.com            require_signed  infusionmail.com;
 anchoragemuseum.org             require_signed  anchoragemuseumassoc.onmicrosoft.com;
+anderson.ucla.edu               require_signed  ucla.onmicrosoft.com;
 anh-usa.org                     require_signed  salsalabs.org;
 anpanama.com                    require_signed  anpanama.com;
 anthem.com                      require_signed  anthem.com;
 anthempropane.com               require_signed  anthempropane.com;
 anthemww.com                    require_signed  matw.onmicrosoft.com
 apgrents.com                    require_signed  icontactmail6.com;
+aph.org                         require_signed  americanprinting.onmicrosoft.com
 aplaceformom.com                require_signed  "aplaceformom.com,aplaceformom.onmicrosoft.com";
 app.bamboohr.com                require_signed  app.bamboohr.com;
 apple.com                       require_signed  apple.com;
 applemusic.com                  require_signed  applemusic.com;
+appletongreene.email            require_signed  appletongreene.email;
 appliednet.com                  require_signed  "mktomail.com,mktroute.com";
 app.production.membersuite.com  require_signed  sendgrid.info;
 appsheet.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 appulatemail.com                require_signed  appulatemail.com;
 aquafadas.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 asianskygroup.com               require_signed  asianskygroup.com;
 asicentral.com                  require_signed  asicentral.com;
 asimplertime.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 asisignage.com                  require_signed  icontactmail4.com;
 askaspn.com                     require_signed  genius-network.com;
+aspenclinique.com               require_signed  "store.smtp.bigcommerce.net,aspenclinique-com.20150623.gappssmtp.com,sendgrid.net";
+aspireonline.com                require_signed  aspireonline.com;
+asppoolco.com                   require_signed  asppoolco.com;                  // exception to sendgrid blacklist
 associationvoice.com            require_signed  associationvoice.com;
 assuretyconsulting.com          signed_white    "assuretyconsulting.com,hubspot.com";   // some unsigned mail via salesforce, no spf record
 astc.org                        require_signed  icontactmail3.com;
 astm.org                        require_signed  astm.org;
 astrazeneca.com                 require_signed  azcollaboration.onmicrosoft.com;
 asurion.com                     require_signed  asurion.com;
 atautosbdc.com                  require_signed  sg01.motosnap.com;
 atdcd-media.com                 require_signed  atdcd-media.com;
 athero.org                      require_signed  "*.musvc.com";
+atlanticcityelectric.com        require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 attn.com                        require_signed  attn.com;
 att.tm00.com                    require_signed  tm00.com;
 aubergeresorts.com              require_signed  aubergeresorts.com;
 audible.com                     require_signed  audible.com;
 audicommunication.com           require_signed  audicommunication.com;
 audiencerewards.com             require_signed  audiencerewards.com;
 audubon.org                     require_signed  audubon.org;
+aurn.com                        require_signed  aurn-com.20150623.gappssmtp.com;
+austinkayak.com                 require_signed  austinkayak.com;
+authorize.net                   require_signed  authorize.net;
 autodeskcommunications.com      require_signed  autodeskcommunications.com;
 autonomous.ai                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 avalonflooring.com              signed_white    "nf157.n-email.net,nf156.n-email.net";  // some unsigned mail from their own servers
 avangate.com                    require_signed  avangate.com;
 avanteducation.com              require_signed  avanteducation.com;
 avvo.com                        signed_white    avvocom.onmicrosoft.com;        // some unsigned mail via salesforce
 azureemail.microsoft.com        require_signed  azureemail.microsoft.com;
+backblaze.com                   require_signed  backblaze.com;
 backupify.com                   require_signed  backupify.com;
 bacnyc.org                      require_signed  bacnyc.ccsend.com;
 baltimorecomiccon.com           require_signed  "baltimorecomiccon-com.20150623.gappssmtp.com,baltimorecomiccon.ccsend.com";
 bamboohr.com                    require_signed  bamboohr.com;
+bancopanama.com.pa              require_signed  bancopanama.com.pa;
 bankofamerica.com               require_signed  bankofamerica.com;
 bankofinternet.com              require_signed  bankofinternet.com;
+bannerbank.com                  require_signed  "bannerbank.com;include:sg.bannerbank.com"; // exception to sendgrid blacklist
 barackobama.com                 require_signed  barackobama.com
 barracuda.com                   require_signed  barracuda.com;                  // unsigned, but passes spf
 bartlettbearing.com             require_signed  "bartlettbearing.onmicrosoft.com,auth.ccsend.com";
 basspronews.com                 require_signed  basspronews.com;
 basusa.com                      signed_white    myenrollservices.onmicrosoft.com;   // some unsigned mail from their own servers with no spf record
 bayard-inc.com                  require_signed  "bayard.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+bayareanewsgroup.com            require_signed  bayareanewsgroup.com;           // mbmg client
 bbdo.com                        require_signed  bbdo.com;
-bbofpa.com                      require_signed  bbofpa.ccsend.com;
+bbofpa.com                      require_signed  "*.hubspotemail.net,bbofpa.ccsend.com";
+bbtlogistics.com                require_signed  bbtlogistics.com;
 bccsoftware.com                 signed_white    "bccsoftware.onmicrosoft.com,email.clickdimensions.com";    // some unsigned from their own servers
 bcgarticles.com                 require_signed  bcgarticles.com;
 bcgjobalerts.com                require_signed  bcgjobalerts.com;
 bchgrp.com                      require_signed  bluechiphospitalitygroup.ccsend.com;
 b.colehaan.com                  require_signed  colehaan.com;
 bedbathandbeyond.com            signed_white    bedbathandbeyond.com;           // unsigned mail via ibm.com, fails spf2/pra record
 behance.com                     require_signed  behance.com;
 belkemail.com                   require_signed  belkemail.com;
 belly-mail.com                  require_signed  main.belly-mail.com;
 b.email.hayneedle.com           require_signed  email.hayneedle.com;
+bestofsigns.com                 require_signed  bestofsigns.com;
 betabrand.com                   require_signed  email.betabrand.com;
 bethelinn.com                   signed_white    bounces.fanbridge.com;          // some unsigned mail from their own servers not listed in their spf record
 betterworldbooks.com            require_signed  mailer.betterworldbooks.com;
 bgeneral.com                    require_signed  "bgeneral.com;ptr:bgeneral.com";
 bhfs.com                        signed_white    "bhfs.com,brownsteinhyattfarberschreck.onmicrosoft.com";    // temp errors, 0 bit key
 biblicalarchaeology.org         require_signed  biblicalarchaeology.wc08.net;
 bicycleadventures.com           require_signed  bicycleadventures.ccsend.com;
 bidsync.com                     require_signed  bidsync.com;
+bigduckcanvas.com               require_signed  bigduckcanvas.com;
 bigyam.com                      require_signed  bigyam.com;
-billdove.com                    require_signed  billdove.com;                   // unsigned mail should pass spf -all
+billdove.com                    require_signed  "billdove.com;ptr:perfora.net";     // unsigned mail without spf txt record
 billerportal.com                require_signed  billerportal.com;
 billing01.email-allstate.com    require_signed  billing01.email-allstate.com;
 billpay.bankofamerica.com       require_signed  billpay.bankofamerica.com;
 billups.com                     require_signed  billups.com;
 bingads.com                     require_signed  bingads.com;
 bitsandpieces-alerts.com        require_signed  bitsandpieces-alerts.com;
 bizbash.com                     require_signed  "bizbash.com,wixshoutout.com";
 bizbuysell.com                  require_signed  bizbuysell.com;
 bizdevworkshops.com             require_signed  cvent-planner.com;
 blacked.com                     require_signed  blacked.com;
+blacknewschannel.com            require_signed  blacknewschannel.com;
+bloomberg.com                   require_signed  bloomberg.com;
 blueapron.com                   require_signed  blueapron.com;
 bluedge.com                     require_signed  "bluedge.com,nri605.onmicrosoft.com";
 blueshoreproperties.com         require_signed  icontactmail2.com;
 bluesoftware.com                require_signed  bluesoftware.com;
 bluesombrero.com                require_signed  send.bluesombrero.com;
 boatus.com                      require_signed  boatus.wc08.net;
 bobcasey.com                    signed_white    bounce.bluestatedigital.com;
 boldexperts.net                 require_signed  boldexperts-net.20150623.gappssmtp.com;
 bolideco.com                    require_signed  "bolideco-com.20150623.gappssmtp.com,bolide.ccsend.com";
 boltonpac.com                   require_signed  boltonpac.com;
+bonhams.com                     require_signed  bonhams.com;
 bookbub.com                     require_signed  bookbub.com;
 bookbyte.com                    require_signed  bookbyte.com;
 booking.com                     require_signed  "booking.com,sg.booking.com";
+borastitch.com                  require_signed  borastitch.com;
 bossard.com                     require_signed  bosnet.onmicrosoft.com;
 bounces.amazon.com              require_signed  amazon.com;
 bovitzinc.com                   require_signed  bovitzinc.onmicrosoft.com;
 box.com                         require_signed  box.com;
 boxed.com                       require_signed  boxed.com;
 boydsphila.com                  require_signed  boydsphila.ccsend.com;
 boylehotels.com                 require_signed  boylehotels.onmicrosoft.com;
 braceshop.com                   require_signed  braceshop.com;
 brandshare.us                   require_signed  brandshare.onmicrosoft.com
 brandywine.org                  signed_white    brandywineconservancyandmuseumofart.ccsend.com;     // some unsigned mail directly from their server on fios.verizon
+bravebrains.com                 require_signed  "*.convertkit.com";
 brenthaven.com                  require_signed  "brenthaven.com,*.mailsdlvrd.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 bridgemailsystem.com            require_signed  bridgemailsystem.com;
 britemg.com                     require_signed  advertickets.onmicrosoft.com;
 broadcaster3.medpagetoday.com   require_signed  broadcaster3.medpagetoday.com;
 broadmoor.com                   require_signed  broadmoor.com;
 brooklynmuseum.org              require_signed  brooklynmuseum.org;
 brrice.edu                      require_signed  brrice.edu;
 brucebrown.com                  require_signed  emlr2.com;
 brumark.com                     signed_white    exploring.ccsend.com;           // unsigned mail from exploring.com, no spf record
+brunnerworks.com                require_signed  mjbrunner.onmicrosoft.com;
 bsrreporting.com                require_signed  bsrreporting.com;
 b.strapworks.com                require_signed  "sendgrid.net,triggermail.io,*.klaviyomail.com";
 bthechange.com                  require_signed  "bthechange-com.20150623.gappssmtp.com,mequoda-btc.wc08.net";
 b.tigerdirect.com               require_signed  tigerdirect.com;
 buckscountyherald.com           require_signed  aweber.com;
 buckscounty.org                 require_signed  countyofbucks.onmicrosoft.com;
 budgetrentacartolls.com         require_signed  smtp.com;
+buildermedianews.com            require_signed  "buildermedianews.com,mail.ppi-news.com,mailervio2.com";
 buildingconnected.com           require_signed  buildingconnected.com;
 bulletinhealthcare.com          require_signed  bulletinhealthcare.com;
+bulletinmedia.com               require_signed  n0151c.onmicrosoft.com;
 burpeenews.com                  require_signed  burpeenews.com;
 business.amazon.com             require_signed  business.amazon.com;
 businessinsider.com             require_signed  businessinsider.com;
 businessmanagementdaily.com     require_signed  businessmanagementdaily.com;
 bustle.com                      require_signed  bustle.com;
 callforentry.org                require_signed  callforentry.org;
 callrail.com                    require_signed  callrail.com;
 calparks.org                    require_signed  mta-bbcspool.convio.net;
 calvaryabq.org                  require_signed  calvaryabq.org;
 camasb.org                      require_signed  camasb.org;
+cammebys.com                    require_signed  cammebys.com;
 camprrm.com                     require_signed  camprrm.ccsend.com;
 canstockphoto.com               require_signed  canstockphoto.com;
 cantaybailaconmigo.com          require_signed  musictogether.ccsend.com;
 capbluecross.com                require_signed  cvent-planner.com;
 capemaymac.org                  require_signed  capemaymac.ccsend.com;
 capitaloneemail.com             require_signed  capitaloneemail.com;
 caratsandcake.com               require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 card-e.em.discover.com          require_signed  card-e.em.discover.com;
 care.comcast.com                signed_white    "care.comcast.com,mdp.comcast.net"; // sending mail with broken signatures
+careeralerts.com                require_signed  careeralerts.com;
 careersinfosecurity.com         require_signed  careersinfosecurity.com;
 caregiveraction.org             require_signed  caregiveraction.org;
 care.gotomypc.com               require_signed  care.gotomypc.com;
 carlisleevents.com              require_signed  carlisleevents.com;
 carnivalcruiselineemail.com     require_signed  carnivalcruiselineemail.com;
+carolinaseniormarketing.com     require_signed  netorgft1302105.onmicrosoft.com;    // touchstone customer
+carterhospitality.com           require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 caskers.com                     require_signed  caskers.com;
 catapultmarketing.com           require_signed  epsilon.onmicrosoft.com;
 catholiccompany.com             require_signed  catholiccompany.com;
 cbginc.com                      require_signed  cbginc-com.20150623.gappssmtp.com;
+cbiz.com                        require_signed  cbiz.com;
 cbldf.org                       signed_white    "nationsend6.com,nationsend14.com,nationsend17.com";
-cbp.dhs.gov                     require_signed  "cbp.dhs.gov,cbpgov.onmicrosoft.com";
+cbp.dhs.gov                     require_signed  cbp.dhs.gov;
 cbre.com                        signed_white    mailsvr.com;                    // some unsigned mail via ms *.outlook.com not listed in spf record
 cbs.com                         require_signed  "cbs.onmicrosoft.com,recurly.com";
 cbsd.org                        signed_white    cbsd.onmicrosoft.com;           // some unsigned mail via notification.com fails spf with -all
 cbsinteractive.com              require_signed  cbsinteractive-com.20150623.gappssmtp.com;
 cbskyridge.com                  require_signed  brianhall.onmicrosoft.com;
 cbsnewsletter.com               require_signed  cbsnewsletter.com;
 cbsradio.com                    require_signed  cbs.onmicrosoft.com;
 cc.aol.com                      require_signed  cc.aol.com;
 cc.att-mail.com                 require_signed  cc.att-mail.com;
 cc.binders.com                  require_signed  binders.com;
+cch.com                         require_signed  cch.com;
 cchcpelink.com                  require_signed  cchcpelink.com;
 c.constantcontact.com           require_signed  c.constantcontact.com;
 ccphilly.org                    require_signed  smtpcorp.com;
 cc.yahoo-inc.com                require_signed  cc.yahoo-inc.com;           // yahoo signin notifications
 cdsanalytical.com               require_signed  cdsanalytical.onmicrosoft.com;
 cdwemail.com                    require_signed  cdwemail.com;
 ceainfo.org                     require_signed  ceainfo.org;
 ce.homeadvisor.com              require_signed  ce.homeadvisor.com;
 celestron.com                   signed_white    celestronllc.onmicrosoft.com;   // unsigned mail invoices that fail spf
+centro.net                      require_signed  centro.net;
 centurylink-business.com        require_signed  centurylink-business.com;
 ceoreport.com                   require_signed  fwbusinesspress.ccsend.com;
 ce.org                          require_signed  ce.org;
 cerner.com                      require_signed  cerner.com;                 // client of mediasupply
 cestrong.com                    require_signed  archpaper.ccsend.com;
 chriscoons.com                  signed_white    bounce.bluestatedigital.com;
 chrismurphy.com                 require_signed  chrismurphy.com;
 christianacare.org              signed_white    "cchs.onmicrosoft.com,mktomail.com";
 christianbook.com               require_signed  christianbook.com;
 c.hyatt.com                     require_signed  c.hyatt.com;
+cinema1.com.br                  require_signed  cinema1.com.br;                 // touchstone customer
 cintas.com                      require_signed  cintas.com;
 cir.acmemarketemails.com        require_signed  cir.acmemarketemails.com;
 ciscospark.com                  require_signed  mail-a.ciscospark.com;
 citibank.com                    require_signed  citibank.com;
 citicorp.com                    require_signed  citicorp.com;
 clilearning.com                 require_signed  clilearning.com;
 climber.com                     require_signed  climber.com;
 clothingline.com                require_signed  clothingline.ccsend.com;
 cloud.carbonite.com             require_signed  cloud.carbonite.com;
 clover.com                      signed_white    clover.com;                     // some unsigned mail via salesforce
-cmail.dickblick.com             require_signed  cmail.dickblick.com;
+clubautomation.com              require_signed  "clubautomation.com,sendgrid.net";
+cmail.dickblick.com             require_signed  "dickblick.com,cmail.dickblick.com";
 cmclibrary.org                  require_signed  capemaycountylibrary.onmicrosoft.com;
 cm.directv.com                  require_signed  cm.directv.com;
 cmdnet.org                      require_signed  cmdnet.org;
+cmls-national.com               require_signed  iheartmedia.onmicrosoft.com;
 cm.zazzle.com                   require_signed  cm.zazzle.com
 cnczone.com                     require_signed  cnczone.com;
 cnn.com                         require_signed  cnn.com;
 coastlinerealty.com             require_signed  coastlinerealty.com;
 cohnreznick.com                 require_signed  cohnreznick.onmicrosoft.com;
 coloradoproduce.org             require_signed  coloradoproduce.ccsend.com;
 colorfilevcs.com                signed_white    colorfilevcs.com;               // some unsigned mail via mailchannels
 colorofchange.org               require_signed  colorofchange.org;
 color-reflections.com           require_signed  colorreflections.onmicrosoft.com;
 com2.smartbidnet.com            require_signed  smartbidnet.com;
+comcast.com                     require_signed  comcast.com;
 comm2.wellsfargoemail.com       require_signed  comm2.wellsfargoemail.com;
 comms.dyson.com                 require_signed  comms.dyson.com;
 comms.opentable.com             require_signed  comms.opentable.com;
 communication.ibx2.com          require_signed  communication.ibx2.com;
 communication.microsoft.com     require_signed  communication.microsoft.com;
 communications.onekingslane.com require_signed  communications.onekingslane.com;
 compressionsale.com             signed_white    icontactmail2.com;              // some unsigned mail via their own servers
 concur.com                      require_signed  sap.onmicrosoft.com;
 conferencegroup.com             signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 connectedcommunity.org          require_signed  connectedcommunity.org;
+connected.staples.com           require_signed  connected.staples.com;
 connect.match.com               require_signed  connect.match.com;
 connect.sundancecatalog.com     require_signed  connect.sundancecatalog.com;
 connect.thewalkingcompany.com   require_signed  connect.thewalkingcompany.com;
 connect.wellsfargoemail.com     require_signed  connect.wellsfargoemail.com;
 conservativesource.com          require_signed  conservativesource.com;
 conshohockenporsche.com         require_signed  "*.shared.hubspot.com,*.hubspotemail.net";
 consigli.com                    require_signed  "consigli.com,consiglico.onmicrosoft.com";
+consolidatedlabel.com           require_signed  email.consolidatedlabel.com;    // exception to sendgrid blacklist
 contact.britishairways.com      require_signed  bounce.ba.com;
 contact-client.com              require_signed  contact-client.com;
 contactpigeon.com               require_signed  contactpigeon.com;
 contractimprint.com             require_signed  criticalimpactinc.com;
 cookwoods.com                   require_signed  cookwoods.ccsend.com;
 corcexpo.com                    require_signed  "corcexpo-com.20150623.gappssmtp.com,corcexpo.ccsend.com";
 cornell.edu                     signed_white    hubspot.com;                    // Cornell Lab of Ornithology via hubspot
 co.rockland.ny.us               require_signed  countyofrockland.onmicrosoft.com;
 corp.lawyer.com                 require_signed  "lawyer.com,referrals.lawyer.com";
 corporate-interiors.com         require_signed  corporate-interiors.ccsend.com;
+corporatesportsent.com          require_signed  corporatesportsent-com.20150623.gappssmtp.com;
 covertside.net                  require_signed  icontactmail6.com;
 coxinc.com                      require_signed  coxinc.com;
+cox.net                         signed_black    mailchimpapp.net;               // expo spam
+coxreps.com                     require_signed  "coxreps.com;ptr:pphosted.com"; // no spf record, but arrives via pphosted
 coyote.com                      require_signed  coyote365.onmicrosoft.com;
 cpcstrategy.com                 signed_white    cpcstrategy-com.20150623.gappssmtp.com; // some unsigned invoices via intacct.com
 cpgmatters.com                  require_signed  cpgmatters.ccsend.com;
 cpiinternational.com            require_signed  "vtiger.email,emcan1.vtigermail.com";
 cpucommunication.com            require_signed  cpucommunication.com;
 credoaction.com                 require_signed  "credoaction.com,controlshiftlabs.com";
 crlnews.com                     require_signed  "omktmail2.com,icontactmail1.com,icontactmail9.com";
 csa.canon.com                   require_signed  "mktroute.com,mktomail.com,mktdns.com,mktosender.com";
 c-sgroup.com                    require_signed  c-sgroup.com;
 csifoodpro.com                  require_signed  csifoodpro.ccsend.com;
+cslattorneys.com                require_signed  cooperandschall.onmicrosoft.com;
 csmail.peoplefinders.com        require_signed  csmail.peoplefinders.com;
 css.email.aa.com                require_signed  css.email.aa.com;
 csuchico.edu                    require_signed  csuchico.edu;
 csusb.edu                       require_signed  "csusb.edu,auth.ccsend.com";
 culvercitychamber.com           require_signed  culvercitychamber.ccsend.com;
 curbed.com                      require_signed  "curbed.com,curbednetwork.com";
 currentcatalog.com              signed_white    currentcatalog.com;             // unsigned from interactive.biz failing spf
 custcommunications.sage.com     require_signed  sage.com;
 customerassist.bankofamerica.com require_signed  customerassist.bankofamerica.com;
 customer.box.com                require_signed  customer.box.com;
+customerfocus.com               require_signed  "customerfocus.com;ptr:zuora.com";  // unsigned mail via zuora
+customers.instacartemail.com    require_signed  customers.instacartemail.com;
 customer.usps.com               require_signed  customer.usps.com;
 customink.com                   require_signed  "customink.com,*.customink.com";
 cutleryandmore.com              require_signed  cutleryandmore.com;
 cwf.org                         require_signed  cwfoundation.onmicrosoft.com;
 d2em.microsoft.com              require_signed  d2em.microsoft.com;
 designandconstructionweek.com   require_signed  designandconstructionweek.com;
 designbandb.com                 require_signed  designbandb-com.20150623.gappssmtp.com;
 designerpages.com               require_signed  designerpages.com;
 detroitjazzfest.org             require_signed  detroitjazzfest.ccsend.com;
 dhl.com                         require_signed  dhl.com;
+dhl-news.com                    require_signed  dhl-news.com;
 diabetes.org                    require_signed  mta-bbcspool.convio.net;
 dialpad.com                     require_signed  dialpad.com;
 diamondcu.com                   require_signed  "diamondcu.com;ptr:pscu.com";
 diamondmm.com                   require_signed  icontactmail3.com;
 dickblick.com                   signed_white    artstores.com;
 dieselpowergear.com             require_signed  "dieselpowergear.com,cmail19.com,cmail20.com";
 digdev.com                      require_signed  digdevdirect.onmicrosoft.com;
 digest.producthunt.com          require_signed  digest.producthunt.com;
+digitalsmarthomes.com           require_signed  digitalsmarthomes.com;
 dimensiondesign.com             require_signed  "mx-senderer-02.com,mx-senderer-03.com";
 dimin.com                       require_signed  dimin-com.20150623.gappssmtp.com;
 diocesan.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 directbuy.com                   require_signed  directbuy.com;
 direct.mercurynews.com          require_signed  direct.mercurynews.com;
 directoryofillustration.com     require_signed  directoryofillustration.com;
+directpay.irs.gov               require_signed  directpay.irs.gov;
 directvote.net                  require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 discogs.com                     require_signed  discogs.com;
 discountschoolsupply.com        require_signed  discountschoolsupply.com;
 discoverphl.com                 require_signed  discoverphl.com;
-discovery.com                   require_signed  "discoverycomm.onmicrosoft.com;ptr:scrippsnetworks.com ptr:appiancloud.com";
+discovery.com                   require_signed  "discovery.com,discoverycomm.onmicrosoft.com;ptr:scrippsnetworks.com ptr:appiancloud.com";
+discoveryonstage.com            require_signed  icontactmail3.com;
 discover.zinio.com              require_signed  discover.zinio.com;
 dishemail.com                   require_signed  dishemail.com;
-disney.com                      require_signed  "twdc.onmicrosoft.com;ptr:batblue.net";     // espn invoices via batblue not listed on disney spf -all
+disney.com                      require_signed  "twdc.onmicrosoft.com;ptr:batblue.net ptr:espn.com";     // espn invoices via batblue or espn not listed on disney spf -all
 ditech-notify.com               require_signed  ditech-notify.com;
 divenewsletter.com              require_signed  divenewsletter.com;
 diversityagenda.com             require_signed  theconferencecenter.ccsend.com;
+divisiond.com                   require_signed  divisiond.com;                  // unsigned mail passes strong spf
 djmarks.com                     require_signed  djmarks.ccsend.com;
 dlsdiscovery.net                require_signed  dlsdiscovery.net;
 dmgiant.del2.com                require_signed  del2.com;
 dmrgraphics.com                 require_signed  netorgft3071376.onmicrosoft.com;
 dnaseattle.com                  require_signed  dnaseattle.onmicrosoft.com;
 dnb.com                         require_signed  dnb.com;
 dnc.com                         require_signed  dnc.com;
 dnc.org                         require_signed  dnc.org;
 doa.nc.gov                      require_signed  doa.nc.gov;
+docs.google.com                 require_signed  docs.google.com;
 docusign.com                    require_signed  docusign.com;
 docusign.net                    require_signed  docusign.net;
 doelegal.com                    require_signed  doelegal.com;
 dogseminarsdirectory.com        require_signed  doggiemanners.ccsend.com;
 dola.com                        require_signed  "dola.com,dola-com.20150623.gappssmtp.com";
 dolenutritionnews.com           require_signed  dolenutritionnews.com;
 dolphinproject.com              require_signed  "*.actionnetwork.org";
-donaldjtrump.com                require_signed  donaldjtrump.com;
 donaldson.com                   require_signed  donaldson.onmicrosoft.com;
-doodle.com                      require_signed  "e.doodle.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+doodle.com                      require_signed  "e.doodle.com,doodle.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-doordash.com                    signed_white    doordash.com;                   // some unsigned mail via salesforce
+doordash.com                    require_signed  "doordash.com;include:_spf.salesforce.com";
 dor.ga.gov                      require_signed  dor.ga.gov;
 dor.state.ma.us                 signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 dpreview.com                    require_signed  dpreview.com;
-drexel.edu                      require_signed  "drexel0.onmicrosoft.com,www-drexel.ccsend.com,imodules.com";
+drexel.edu                      require_signed  "drexel0.onmicrosoft.com,www-drexel.ccsend.com,imodules.com;include:_spf.salesforce.com";
 drfmail.com                     require_signed  drfmail.com;
 drobo.com                       require_signed  drobo.com;
 dropbox.com                     require_signed  dropbox.com;
 dropboxmail.com                 require_signed  dropboxmail.com;
 drpa.org                        require_signed  "drpapatco.onmicrosoft.com,drpapatco.ccsend.com";
 dscc.org                        require_signed  "dscc.org;ptr:bluestatedigital.com";
 dslgroup.com                    require_signed  dslgroup.ccsend.com;            // needs spf for some unsigned mail from their own servers
 ducotech.com                    signed_white    ducotech.ccsend.com;            // some unsigned mail from their own servers
 dullesmetro.com                 require_signed  dullesmetro.ccsend.com;
 duluthtradingemail.com          require_signed  duluthtradingemail.com;
+dunbartraining.com              require_signed  dunbartraining.com;
 duncanchannon.com               require_signed  duncanchannon-com.20150623.gappssmtp.com;
 dunnemanning.com                require_signed  dunnemanning-com.20150623.gappssmtp.com;
 dvd.com                         require_signed  dvd.com;
 dvfbc.com                       require_signed  dvfbc.ccsend.com;
+dvlift.com                      require_signed  "auth.ccsend.com,dvlift.onmicrosoft.com";
 dwquailgolf.com                 require_signed  icontactmail1.com;
 dynadmic.com                    require_signed  dynadmic.onmicrosoft.com;
 e1.emeraldexpoinfo.com          require_signed  e1.emeraldexpoinfo.com;
 e1.llbean.com                   require_signed  e1.llbean.com;
+e1.tripadvisor.com              require_signed  e1.tripadvisor.com;
 e2.shutterfly.com               require_signed  e2.shutterfly.com;
+e2.tripadvisor.com              require_signed  e2.tripadvisor.com;
+e3.tripadvisor.com              require_signed  e3.tripadvisor.com;
 e8.aigdigital.com               require_signed  e8.aigdigital.com;
 e.adweek.com                    require_signed  e.adweek.com;
 e.airgas.com                    require_signed  e.airgas.com;
 ealert.nature.com               require_signed  ealert.nature.com;
 ealerts.bankofamerica.com       require_signed  ealerts.bankofamerica.com;
 e.allrecipes.com                require_signed  e.allrecipes.com;
 ealogistics.com                 require_signed  "ealogistics1.onmicrosoft.com,ealogistics.ccsend.com";
+eamail4.support.ucla.edu        require_signed  eamail4.support.ucla.edu;
 e.appleseeds.com                require_signed  e.appleseeds.com;
+ease.com                        require_signed  ease.com;
 eastsideco.com                  require_signed  eastsideco.com;
 eastwood.com                    signed_white    eastwood.com;                   // unsigned mail from their own web servers fails strong spf
 easy.staplesadvantage.com       require_signed  easy.staplesadvantage.com;
 easy.staples.com                require_signed  easy.staples.com;
 easywoodtools.com               require_signed  easywoodtools.ccsend.com;
 eat24.com                       require_signed  eat24.com;
+eat.sunbasket.com               require_signed  "eat.sunbasket.com,sendgrid.net";
 e.att-mail.com                  require_signed  e.att-mail.com;
 e.avis.com                      require_signed  e.avis.com;
 e.barenecessities.com           require_signed  e.barenecessities.com;
 e.basbleu.com                   require_signed  e.basbleu.com;
 ebay.com                        require_signed  ebay.com;
 eclinicalmail.com               require_signed  eclinicalmail.com;
 eclipsegr.com                   require_signed  eclipsegr-com.20150623.gappssmtp.com;
 e.colehaan.com                  require_signed  e.colehaan.com;
 e.collegeboard.org              require_signed  e.collegeboard.org;
 e.columbia.com                  require_signed  e.columbia.com;
-e.comixology.com                require_signed  "e.comixology.com,comixology.com";
+e.comixology.com                require_signed  e.comixology.com;
 ecommail.walgreens.com          require_signed  ecommail.walgreens.com;
 economist.com                   require_signed  economist.com;
 e.constantcontact.com           require_signed  e.constantcontact.com;
 e.copart.com                    require_signed  e.copart.com;
 ecrmemail.verizonwireless.com   require_signed  verizonwireless.com;
 edgewaternetworks.com           require_signed  edgewaternetworks.com;
 ed.gov                          require_signed  "ed.gov,*.ed.gov";
 e.digikey.com                   require_signed  e.digikey.com;
 e.discover.com                  require_signed  e.discover.com
 e.disneyinteractive.com         require_signed  e.disneyinteractive.com;
+editorial.theguardian.com       require_signed  editorial.theguardian.com;
 e.doverpublishing.com           require_signed  e.doverpublishing.com;
 e.drapers.com                   require_signed  e.drapers.com;
 e.drugstore.com                 require_signed  e.drugstore.com;
 edu.cpaacademy.org              require_signed  edu.cpaacademy.org;
 e.ea.com                        require_signed  e.ea.com;
 e.economist.com                 require_signed  e.economist.com;
 e.eddiebauer.com                require_signed  e.eddiebauer.com;
 e.eharmony.com                  require_signed  e.eharmony.com;
 e.elfcosmetics.com              require_signed  e.elfcosmetics.com;
+e.emirates.email                require_signed  e.emirates.email;
 e.empiretodaynews.com           require_signed  e.empiretodaynews.com;
 e.esteelauder.com               require_signed  e.esteelauder.com;
+e.etradefinancial.com           require_signed  e.etradefinancial.com;
 e.etsy.com                      require_signed  e.etsy.com;
 e.everydayhealth.com            require_signed  e.everydayhealth.com;
 e.expertmarket.com              require_signed  e.expertmarket.com;
 e.fanaticsretailgroup.com       require_signed  e.fanaticsretailgroup.com;
 e.feld-inc.com                  require_signed  e.feld-inc.com;
 e.luckybrand.com                require_signed  e.luckybrand.com;
 e.lumberliquidators.com         require_signed  e.lumberliquidators.com;
 elzufon.com                     require_signed  elzufon.com;
 em.1800flowers.com              require_signed  em.1800flowers.com;
 em.adweek.com                   require_signed  em.adweek.com;
+em.aetna.com                    require_signed  em.aetna.com;
 email1.avery.com                require_signed  email1.avery.com;
 email1.garmin.com               require_signed  email1.garmin.com;
 email1.geico.com                require_signed  email1.geico.com;
 email1.omronhealthcare.com      require_signed  email1.omronhealthcare.com;
+email1.register.com             require_signed  email1.register.com;
 email.1stdibs.com               require_signed  email.1stdibs.com;
 email2.directnic.com            require_signed  directnic.com;
 email2.microsoft.com            require_signed  email2.microsoft.com;
 email2.office.com               require_signed  email2.office.com;
 email2.riteaid.com              require_signed  email2.riteaid.com;
 email4.directnic.com            require_signed  directnic.com;
 email-aaa.com                   require_signed  email-aaa.com;
 email.aa.com                    require_signed  email.aa.com;
 email.aarp.org                  require_signed  email.aarp.org;
 email.acmemarketemail.com       require_signed  email.acmemarketemail.com;
+email.adweek.com                require_signed  email.adweek.com;
 email.aegeanair.com             require_signed  email.aegeanair.com;
 email.alignable.com             require_signed  "*.alignable.com";
 email.allrecipes.com            require_signed  email.allrecipes.com;
 email.alm.com                   require_signed  email.alm.com;
 email.amc.com                   require_signed  email.amc.com;
 email.chase.com                 require_signed  email.chase.com;
 email.cheaptickets.com          require_signed  email.cheaptickets.com;
 email.chop.edu                  require_signed  email.chop.edu;
 emailchristmastreeshops.com     require_signed  emailchristmastreeshops.com;
 email.clarksusa.com             require_signed  email.clarksusa.com;
+email.classmates.com            require_signed  email.classmates.com;
 email.coldwatercreek.com        require_signed  coldwatercreek.com;
 emailcoldwatercreek.com         require_signed  emailcoldwatercreek.com;
 email.comcastsportsnet.com      require_signed  email.comcastsportsnet.com;
 email.conservativeintel.com     require_signed  email.conservativeintel.com;
 email.consumerreports.org       require_signed  email.consumerreports.org;
 email.eileenfisher.com          require_signed  email.eileenfisher.com;
 email.ellisisland.org           require_signed  email.ellisisland.org;
 email.emeraldclub.com           require_signed  email.emeraldclub.com;
 email.engineering360.com        require_signed  email.engineering360.com;
 email.enterprise.com            require_signed  email.enterprise.com;
+email.equifax.com               require_signed  amazonses.com;
 email.eventmarketerinfo.com     require_signed  email.eventmarketerinfo.com;
 email.eviteideas.com            require_signed  email.eviteideas.com;
 e-mail.fabletics.com            require_signed  e-mail.fabletics.com;
 email.familyvacationcritic.com  require_signed  email.familyvacationcritic.com;
 email.famousfootwear.com        require_signed  email.famousfootwear.com;
 email.foodandwine.com           require_signed  email.foodandwine.com;
 email.food.com                  require_signed  email.food.com;
 email.foodnetwork.com           require_signed  email.foodnetwork.com;
 email.frame.io                  require_signed  email.frame.io;
 email.furnacecreekresort.com    require_signed  email.furnacecreekresort.com;
+email.furnituretoday.com        require_signed  pbmbrands.com;
 email.gaiam.com                 require_signed  "email.gaiam.com,pmta.sailthru.com";
 email-galls.com                 require_signed  email-galls.com;
 email.gap.com                   require_signed  email.gap.com;
 email.gapfactory.com            require_signed  email.gapfactory.com;
 email.garrettwade.com           require_signed  email.garrettwade.com;
 email.insideradio.com           require_signed  email.insideradio.com;
 email.jackfrostnational.com     require_signed  email.jackfrostnational.com;
 email.jacquielawson.com         require_signed  email.jacquielawson.com;
 email.jcrew.com                 require_signed  email.jcrew.com;
 email.jetblue.com               require_signed  email.jetblue.com;
+email.jockeycomfort.com         require_signed  email.jockeycomfort.com;
 email.joistapp.com              require_signed  "mandrillapp.com,mailchimpapp.net,email.joistapp.com";
 email.justflyemail.com          require_signed  email.justflyemail.com;
 email.kqed.org                  require_signed  email.kqed.org;
 email.laithwaiteswine.com       require_signed  email.laithwaiteswine.com;
 email.lakeshorelearning.com     require_signed  email.lakeshorelearning.com;
 email.roku.com                  require_signed  email.roku.com;
 email.ross-simons.com           require_signed  email.ross-simons.com;
 e-mailr.roadrunnersports.com    require_signed  e-mailr.roadrunnersports.com;
 emails.aircanada.com            require_signed  emails.aircanada.com;
 email.santanderbank.com         require_signed  email.santanderbank.com;
+email.saucony.com               require_signed  email.saucony.com;
 emails.brooksbrothers.com       require_signed  emails.brooksbrothers.com;
 emails.buick.com                require_signed  emails.buick.com;
 emails.cafepress.com            require_signed  cafepress.com;
 emails.chase.com                require_signed  emails.chase.com;
 e-mail.schneider-electric.com   require_signed  e-mail.schneider-electric.com;
 email.secretescapes.com         require_signed  email.secretescapes.com;
 emails.evernote.com             require_signed  emails.evernote.com;
 emails.flyfrontier.com          require_signed  emails.flyfrontier.com;
 email.sheetmusicplus.com        require_signed  email.sheetmusicplus.com;
 emails.hertz.com                require_signed  emails.hertz.com;
+email.shoebuy.com               require_signed  email.shoebuy.com;
 e-mail.shoecarnival.com         require_signed  e-mail.shoecarnival.com;
 emails.honda.com                require_signed  emails.honda.com;
+email.shopify.com               require_signed  "email.shopify.com;ptr:shopify.com";
 email.siriusxm.com              require_signed  email.siriusxm.com;
 email.sj.aaa.com                require_signed  email.sj.aaa.com;
 email.snagajob.com              require_signed  email.snagajob.com;
 emails.nixle.com                require_signed  "emails.nixle.com,smtp.nixle.com";
 emails.nwruk.com                require_signed  emails.nwruk.com;
 emails.snapfish.com             require_signed  emails.snapfish.com;
 emails.supercuts.com            require_signed  emails.supercuts.com;
 email.stitchfix.com             require_signed  email.stitchfix.com;
 emails.toptenreviews.com        require_signed  emails.toptenreviews.com;
 emails.touchofclass.com         require_signed  touchofclass.com;
+email-stubhub.com               require_signed  email-stubhub.com;
 emails.underarmour.com          require_signed  emails.underarmour.com;
 email.supermediastore.com       require_signed  email.supermediastore.com;
-emails.ups.com                  require_signed  "emails.ups.com,ups.com";
+emails.ups.com                  require_signed  emails.ups.com;
 emails.williamsandkent.com      require_signed  emails.williamsandkent.com;
 emails.wyndhamhotelgroup.com    require_signed  emails.wyndhamhotelgroup.com;
 e-mails.wyndhamrewards.com      require_signed  e-mails.wyndhamrewards.com;
 emails.xfinity.com              require_signed  emails.xfinity.com;
 email.targetportraits.com       require_signed  email.targetportraits.com;
 email.thecompanystore.com       require_signed  "thecompanystore.com,email.thecompanystore.com";
 email.the-cover-store.com       require_signed  email.the-cover-store.com;
 email.ticketmaster.com          require_signed  email.ticketmaster.com;
 email.timewarnercable.com       require_signed  email.timewarnercable.com;
 email.toms.com                  require_signed  email.toms.com;
+email-totalwine.com             require_signed  email-totalwine.com;
 email.toyotaforklifts.com       require_signed  email.toyotaforklifts.com;
 email.travelchannel.com         require_signed  email.travelchannel.com;
 email.travelzoo.com             require_signed  email.travelzoo.com;
 email.ugg.com                   require_signed  email.ugg.com;
 email-unitedconcordia.com       require_signed  email-unitedconcordia.com;
 emailusa.coca-cola.com          require_signed  emailusa.coca-cola.com;
 email.usbank.com                require_signed  email.usbank.com;
 email.variety.com               require_signed  email.variety.com;
 email.vimeo.com                 require_signed  email.vimeo.com;
 email.vudu.com                  require_signed  email.vudu.com;
+email.wallywine.com             require_signed  email.wallywine.com;
 email-weightwatchers.com        require_signed  email-weightwatchers.com;
 email.weightwatchers.com        require_signed  email.weightwatchers.com;
 email.wetransfer.com            require_signed  email.wetransfer.com;
 email.wholefoodsmarket.com      require_signed  email.wholefoodsmarket.com;
 email-winzip.com                require_signed  email-winzip.com;
 emailworldmarket.com            require_signed  emailworldmarket.com;
-email.wsfsbank.com              require_signed  email.wsfsbank.com;
+email.wsfsbank.com              require_signed  "email.wsfsbank.com;ip4:206.71.80.64/27 ip4:216.145.127.64/27 ip4:63.240.154.0/24 ip4:63.240.155.0/24 ip4:74.121.52.239";
 email.wyndhamvo.com             require_signed  email.wyndhamvo.com;
 email.ydmailer.com              require_signed  email.yodle.com;
 email.zappos.com                signed_white    email.zappos.com;               // key no longer in dns
 email.zazzle.com                require_signed  zazzle.com;
 email.zionlodge.com             require_signed  email.zionlodge.com;
 embarqcreative.com              signed_white    embarqcreative.com;             // some unsigned mail via their own mail server
 em.bbt.com                      require_signed  em.bbt.com;
 em.bloomstoday.com              require_signed  em.bloomstoday.com;
 embryriddleundergraduate.org    require_signed  embryriddleundergraduate.org;
 em.citizensbank.com             require_signed  em.citizensbank.com;
+emcom.bankofamerica.com         require_signed  emcom.bankofamerica.com;
 em.dgcatalog.net                require_signed  em.dgcatalog.net;
+em.diabetesselfmanagement.com   require_signed  em.diabetesselfmanagement.com;
 em.drugstorenews.com            require_signed  em.drugstorenews.com;
 emedco.com                      require_signed  emedco-com.20150623.gappssmtp.com;
+em.ems.com                      require_signed  em.ems.com;
+emergencyemail.org              require_signed  emergencyemail.org;             // unsigned mail passes strong spf
 emerika.com                     require_signed  emerika.com;
 emerson.com                     require_signed  emerson.onmicrosoft.com;
 emessage.njezpass.net           require_signed  amazonses.com;
+emessaging.us.hsbc.com          require_signed  "*.hsbc.com,hsbc.com";
 e.metlifeyourlife.com           require_signed  e.metlifeyourlife.com;
 e.metmuseum.org                 require_signed  e.metmuseum.org;
 em.express.com                  require_signed  em.express.com;
 em.ftd.com                      require_signed  em.ftd.com;
+em.harborfreight.com            require_signed  em.harborfreight.com;
 em.hollandamerica.com           require_signed  em.hollandamerica.com;
 e.micromark.com                 require_signed  e.micromark.com;
 emilyslist.org                  signed_white    bounce.bluestatedigital.com;    // some unsigned mail via bluestatedigital
 emirates.email                  require_signed  emirates.email;
 emjreviews.com                  require_signed  zcsend.net;
 em.mgmresorts.com               require_signed  em.mgmresorts.com;
 em.newyorknewyork.com           require_signed  em.newyorknewyork.com;
 em.nordstrom.com                require_signed  "em.nordstrom.com,nordstrom.com";
 em.omnihotels.com               require_signed  em.omnihotels.com;
 e.montblanc.com                 require_signed  e.montblanc.com;
+emory.edu                       signed_white    sendgrid.net;                   // probably other senders as well
 e.mozilla.org                   require_signed  e.mozilla.org;
 em.pccatalog.net                require_signed  em.pccatalog.net;
 em.penguinrandomhouse.com       require_signed  em.penguinrandomhouse.com;
 em.pinnaclesys.com              require_signed  em.pinnaclesys.com;
 em.prcatalog.net                require_signed  em.prcatalog.net;
 em.target.com                   require_signed  em.target.com;
 e.murad.com                     require_signed  e.murad.com;
 em.vdara.com                    require_signed  em.vdara.com;
 em.venetian.com                 require_signed  em.venetian.com;
 em.vonage.com                   require_signed  em.vonage.com;
+em.walmart.com                  require_signed  em.walmart.com;
 em.westmarine.com               require_signed  em.westmarine.com;
 em.wwcatalog.net                require_signed  em.wwcatalog.net;
 e.mypublisher.com               require_signed  e.mypublisher.com;
 em.zales.com                    require_signed  em.zales.com;
 e.nationalgeographic.com        require_signed  e.nationalgeographic.com
 enews.swimstyle.com             require_signed  swimstyle.com;
 e.newyorktimesinfo.com          require_signed  e.newyorktimesinfo.com;
 engagebycell.com                require_signed  engagebycell.com;
 e.njadvancemedia.com            require_signed  e.njadvancemedia.com;
 e.nm.com                        require_signed  e.nm.com;
-en.nydailynews.com              signed_white    en.nydailynews.com;             // was signed, but they broke their _domainkey dns record
+en.nydailynews.com              require_signed  esp1.co;
 e.nordstromrack.com             require_signed  e.nordstromrack.com;
 e.normthompson.com              require_signed  e.normthompson.com;
 entercom.com                    signed_white    entercom.com;                   // unsigned mail from their own mail servers, not listed in their spf record
+e.ntlpartner.com                require_signed  e.ntlpartner.com
 e.officedepot.com               require_signed  e.officedepot.com;
 e.online.att-mail.com           require_signed  e.online.att-mail.com;
 eonline.e-vanguard.com          require_signed  e-vanguard.com;
 e.opensky.com                   require_signed  e.opensky.com;
 e.orbitzrewards.com             require_signed  e.orbitzrewards.com;
 e-organicgardening.com          require_signed  e-organicgardening.com;
 e.payroll.intuit.com            require_signed  e.payroll.intuit.com;
 e.pipesandcigars.com            require_signed  e.pipesandcigars.com;
 e.pnc.com                       require_signed  e.pnc.com;
+epochtimes.com                  signed_white    "epochtimes.com,*.epochtimes.com";
 e.pond5.com                     require_signed  e.pond5.com;
 e.proflowers.com                require_signed  e.proflowers.com;
 e.progressive.com               require_signed  e.progressive.com;
 e.proplants.com                 require_signed  e.proplants.com;
 epysa.org                       require_signed  "epysa.org,epysa.onmicrosoft.com";
 e-rewards.com                   require_signed  e-rewards.com;
 eriksen.com                     require_signed  eriksen.ccsend.com;
 e-rodalesorganiclife.com        require_signed  e-rodalesorganiclife.com;
 e.safelite.com                  require_signed  e.safelite.com;
 esca.org                        require_signed  esca.ccsend.com;
+e.services.mayoclinic.com       require_signed  e.services.mayoclinic.com;
+e.shoppinkblush.com             require_signed  esp1.co;
 e.showmanagement.com            require_signed  e.showmanagement.com;
 e.shutterfly.com                require_signed  e.shutterfly.com;
 e.siriusxm.com                  require_signed  e.siriusxm.com;
 e-skillpath.com                 require_signed  e-skillpath.com;
-e.smilereminder.com             require_signed  smilereminder.com;
+e.smilereminder.com             require_signed  "*.smilereminder.com,smilereminder.com";
 e.snowbasin.com                 signed_white    e.snowbasin.com;                // 200608._domainkey.e.snowbasin.com record not found, used to pass spf but that txt record is now gone also
+espn.com                        require_signed  "twdc.onmicrosoft.com,disneyonline.com";
 esri.com                        signed_white    esri.com;                       // some unsigned mail via pphosted
 essentialhardware.com           signed_white    essentialhardware.com;          // some unsigned mail via klaviyomail.com
+e.staples.com                   require_signed  e.staples.com;
 e.staplespromotionalproducts.com require_signed  e.staplespromotionalproducts.com;
 e.starbucks.com                 require_signed  e.starbucks.com;
 e.starwoodhotelsemail.com       require_signed  e.starwoodhotelsemail.com;
 e.statefarm.com                 require_signed  e.statefarm.com;
+estrellamedia.com               require_signed  estrellamedia.onmicrosoft.com;  // mbmg client
 e.swimsuitsforall.com           require_signed  e.swimsuitsforall.com
 e.takepart.com                  require_signed  e.takepart.com;
 e.target.com                    require_signed  e.target.com;
 e.tdbank.com                    require_signed  e.tdbank.com;
 e.teavana.com                   require_signed  e.teavana.com;
 e.toyota.com                    require_signed  "e.toyota.com,amazonses.com";
 etrailer.com                    require_signed  icontactmail1.com;
 etrainingschool.com             require_signed  criticalimpactinc.com;
 e.travelocity.com               require_signed  "mg.travelocity.com,mg.expediamail.com";
 e.tripadvisor.com               require_signed  e.tripadvisor.com;
-etsy.com                        require_signed  mail.etsy.com;
+etsy.com                        require_signed  "etsy.com,mail.etsy.com";
 et.uber.com                     require_signed  et.uber.com;
 e-tui.transunion.com            require_signed  e-tui.transunion.com;
 e.turbotax.intuit.com           require_signed  e.turbotax.intuit.com;
 e.underarmour.com               require_signed  "*.underarmour.com";
 e.urbanoutfitters.com           require_signed  e.urbanoutfitters.com;
 exchange.calstatela.edu         require_signed  csula.onmicrosoft.com;
 executivehospitality.com        require_signed  spsend.com;
 exhibitoronline.co              require_signed  exhibitoronline.co;
 exlevents.com                   require_signed  "exlevents.com,mktomail.com";
 expediamail.com                 require_signed  mg.expediamail.com;
+explore.gofarrewards.wellsfargo.com require_signed  explore.gofarrewards.wellsfargo.com;
 explore.oceaniacruises.com      require_signed  explore.oceaniacruises.com;
 explore.pinterest.com           require_signed  explore.pinterest.com;
 explore.thenorthface.com        require_signed  explore.thenorthface.com;
 expolinc.us                     signed_white    expolinc.ccsend.com;            // some unsigned mail from their outbound servers, no spf record
 exponation.net                  require_signed  "exponation-net.20150623.gappssmtp.com,auth.ccsend.com,icontactmail1.com";
 fantomdrives.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 farmsanctuary.org               require_signed  mta-bbcspool.convio.net;
 fashionbizinc.org               require_signed  fashionbizinc.ccsend.com;
 fastspring.com                  require_signed  "fastspring.com;include:_spf.salesforce.com";
 fatherly.com                    require_signed  fatherly-com.20150623.gappssmtp.com;
+fb.com                          require_signed  fb.com;
 fedbarlive.org                  signed_white    "emsend.com,em.secureserver.net";   // emsend signing with domainkeys, not dkim
 fedex.com                       require_signed  fedex.com;
 fedgovconnect.org               require_signed  fedgovconnect-org.20150623.gappssmtp.com;
 feedvisor.com                   require_signed  "feedvisor-com.20150623.gappssmtp.com,feedvisor.com";
 feliciansisters.org             require_signed  feliciansisters.onmicrosoft.com;
 fiercehealthpayer.com           require_signed  fiercehealthpayer.com;
 fiercepharma.com                require_signed  fiercepharma.com;
 fightforreform.org              signed_white    bounce.bluestatedigital.com;    // some unsigned mail from bluestate
 fileandservedelaware.com        require_signed  fileandserve.com;
 filmadelphia.org                signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+filmtools.com                   require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 firebirdpresort.com             require_signed  firebirdpresort.onmicrosoft.com;
 firecracker10k.org              require_signed  icontactmail4.com;
 fire-design.fr                  require_signed  newsletter.fire-design.fr;
 fireflyon.com                   require_signed  fireflyon-com.20150623.gappssmtp.com;
 firefox.com                     require_signed  firefox.com;
 firstam.com                     require_signed  firstam.com;
 firstleaf.club                  require_signed  "firstleaf.club,pmta.sailthru.com";
+fiscal.ca.gov                   require_signed  fiscal.ca.gov;                  // unsigned mail passes strong spf
 fisherunitech.com               require_signed  fisherunitech.com;
 fitbit.com                      require_signed  email.fitbit.com
 fitzgeraldphoto.com             require_signed  emlr2.com;
 fivethirtyeight.com             require_signed  fivethirtyeight.com;
 fixthedebt.org                  require_signed  bounce.bluestatedigital.com;
 fmidm.com                       signed_white    "fmidm.com,fmidirectmail.onmicrosoft.com";  // some unsigned mail via their own servers
 followmyhealth.com              require_signed  email.followmyhealth.com;
 fontexplorerx.com               signed_white    email.monotype.com;             // some unsigned mail via salesforce
 foolsubs.com                    require_signed  foolsubs.com;
 footballcamps.com               require_signed  footballcamps.com;
+football.cbssports.com          require_signed  "cbssports.com;ptr:cbssports.com";  // unsigned but forced with spf
 footsolutions.com               require_signed  footsolutions.com;
 forbes.com.br                   require_signed  forbes-com-br.20150623.gappssmtp.com;
+forbes.com                      require_signed  forbes.com;
 foreseeresults.com              require_signed  4cresults.com;
 foreupsoftware.com              require_signed  foreupsoftware.com;
 formdecor.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 fortispay.com                   require_signed  fortispay.com;
 fourhourbody.com                require_signed  fourhourbody.com;
 fox8live.com                    require_signed  raycom.onmicrosoft.com;
 fox.com                         require_signed  "foxgroupinc.onmicrosoft.com,cmail19.com,cmail20.com";
 foxcreative.net                 signed_white    emlr2.com;                      // some unsigned mail via ms outlook
+foxfieldltd.com                 require_signed  "foxfieldltd.com;ptr:mimecast.com";         // unsigned, arrives via mimecast
 foxnews.com                     require_signed  foxnews.com;
 foxtv.com                       require_signed  foxtv.onmicrosoft.com;
 frame.io                        require_signed  "frame.io,amazonses.com";
 fraudprevention.chase.com       require_signed  fraudprevention.chase.com;
 freeconference.com              signed_white    freeconference.com;             // allow their messages to be forwarded
 freedomforallamericans.org      require_signed  bounce.bluestatedigital.com;
 freepik-mail.com                require_signed  freepik-mail.com;
 freshbooks.com                  require_signed  freshbooks.com;
 from.ieee.org                   require_signed  from.ieee.org;
+frontporch.net                  require_signed  mg.regroup.com;
 fsshelpdesk.org                 require_signed  news.fedhelpdesk.org;
+ftbagency.me                    require_signed  ftbagency.me;                   // unsigned mail passes strong spf
 fult.com                        require_signed  fultonbank.onmicrosoft.com;
 fusioncharts.com                require_signed  fusioncharts.com;
 futurity.org                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 gahmusa.org                     require_signed  gahmusa.org;                    // cgale unsubscribed 2017-06-28
 gahsp.org                       require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 gallegosunited.com              require_signed  gallegosunited-com.20150623.gappssmtp.com;
 gamechanger.io                  require_signed  gamechanger.io;
 gap.com                         require_signed  gap.com;
+garrettassociates.biz           require_signed  garrettassociates.biz;
 gate1mail.com                   require_signed  gate1mail.com;
 gc.email.amazon.com             require_signed  amazon.com;                     // gift cards
 gcihealth.com                   require_signed  yrb.onmicrosoft.com;
 generation-brands.com           require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 genghisgrill.com                require_signed  "pxsmail.com,khansklub.pxsmail.com";
+genmediapartners.com            require_signed  genmediapartners.com;
 geocaching.com                  require_signed  geocaching.com;
 gershmany.org                   signed_white    mail196.atl61.mcsv.net;
 gerstmangroup.com               require_signed  "auth.ccsend.com,questservicegroup.ccsend.com";
 ges.com                         signed_white    "ges.com,viadcorp.onmicrosoft.com";
 getfpv.com                      require_signed  getfpv.com;
 getjibjab.com                   require_signed  getjibjab.com;
 getty.edu                       require_signed  "getty.edu,gettytrust.onmicrosoft.com";
 gge4mailer.com                  signed_white    email.gge4mailer.com;
 ggimageusa.com                  require_signed  "icontact.com,icontactmail3.com,smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com,ggimageusa-com.20150623.gappssmtp.com";
+giantmedia.com                  require_signed  giantm.onmicrosoft.com;
 gifts.figis.com                 require_signed  gifts.figis.com;
 gillians.com                    require_signed  gillians.ccsend.com;
 girlscoutsla.org                require_signed  girlscoutsla.org;
 glassdoor.com                   require_signed  glassdoor.com;
 glassesusa.com                  require_signed  bronto.com;
 globalfinancegroup.com          require_signed  globalfinancegroup-com.20150623.gappssmtp.com;
 globalmasstransit.net           require_signed  cvent-planner.com;
+globalmediagroup.com            require_signed  globalmediagroup.com;           // unsigned mail passes strong spf
 globaltranz.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 go.coachup.com                  require_signed  go.coachup.com;
 godaddy.com                     require_signed  godaddy.com;
 gofundme.com                    require_signed  "gofundme.com,email.gofundme.com";
 go.intervalworld.com            require_signed  go.intervalworld.com;
 googlemail.com                  require_signed  googlemail.com;
 goop.com                        require_signed  goop.com;
 gopac.org                       signed_black    icontactmail1.com;              // survey spam
 gophercentral.com               require_signed  gophercentral.com;
 gordoncompaniesinc.com          require_signed  gordoncompaniesinc.com;
+gosafeguard.com                 require_signed  deluxe.onmicrosoft.com;
 goto.arcadiapublishing.com      require_signed  goto.arcadiapublishing.com;
 gotowebinar.com                 require_signed  gotowebinar.com;
 gov-con.com                     require_signed  icontactmail2.com;
 govsubscriptions.michigan.gov   require_signed  govsubscriptions.michigan.gov;
 gpcc.com                        require_signed  gpcc.com;
 graphiccommunications.us        require_signed  graphiccommunications.onmicrosoft.com;
 graphisoft.com                  require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 greatebay.com                   require_signed  sendclubmail.com;
 greaterthanone.com              require_signed  greaterthanone.onmicrosoft.com;
 greatist.com                    require_signed  greatist.com;
+greatnonprofits.org             require_signed  greatnonprofits.org;
 greatparentingshow.com          require_signed  ontramail.com;
 greenbiz.com                    require_signed  greenbiz.com;
 greenbuildingunited.org         require_signed  dvgbc365.onmicrosoft.com;
 greenforall.org                 require_signed  greenforall.org;
 greenpasture.org                require_signed  greenpasture.org;
+greenpestsolutions.com          require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 greenphillyblog.com             require_signed  "gmail.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 greensecurityllc.com            require_signed  netorgft1001345.onmicrosoft.com;
 greenvelope.com                 require_signed  greenvelope.com;
 greyhawk.com                    require_signed  "greyhawkna.onmicrosoft.com,*.ccsend.com";
 greystar.com                    require_signed  "greystar365.onmicrosoft.com,entrata.com";
 habitatncc.org                  require_signed  habitatncc.ccsend.com;
 halfoffdeal.com                 require_signed  halfoffdeal.com;
 hallmarkmoviesnow.com           require_signed  "hallmarkmoviesnow.com,pmta.sailthru.com";
 halpernlevy.com                 require_signed  halpernandlevy.onmicrosoft.com;
 hanapinmarketing.com            require_signed  hanapinmarketing.com;
+handy.com                       require_signed  handy.com;
 happify.com                     require_signed  happify.com;
 harborfreight.com               require_signed  harborfreight-com.20150623.gappssmtp.com;
 harborfreightemail.com          require_signed  harborfreightemail.com;
 hardrockhotelsd.com             require_signed  zmaildirect.com;
 hardywindows.com                require_signed  hardywindows.onmicrosoft.com;
 healthcarefinancenews.com       require_signed  healthcarefinancenews.com;
 healthcare.gov                  require_signed  healthcare.gov;
 healthcareinfosecurity.com      require_signed  healthcareinfosecurity.com;
 healthcareitnews.com            require_signed  healthcareitnews.com;
 healthequity.com                require_signed  healthequity.com;
+health.harvard.edu              require_signed  sendgrid.net;
+healthiq.com                    require_signed  healthiq-com.20150623.gappssmtp.com;
 healthjobs.com                  require_signed  healthjobs.com;
 hearthandhome.com               require_signed  hearthandhome.com;
+heartlandcharterschool.com      require_signed  heartlandcharterschool-com.20150623.gappssmtp.com;
 hellofresh.com                  require_signed  hellofresh.com;
 hello.generalassemb.ly          require_signed  hello.generalassemb.ly;
 hellonomad.com                  require_signed  hellonomad.com;
 hello.readyrefresh.com          require_signed  hello.readyrefresh.com;
 hellotrade.com                  require_signed  hellotrade.com;
 hightailmail.com                require_signed  "hightailmail.com,*.hubspotemail.net,*.hubspot.com";
 himssmedia.com                  require_signed  himssmedia.com;
 hired.com                       require_signed  hired.com;
 hive.com                        require_signed  "hive.com,hive-com.20150623.gappssmtp.com";
 hmc.edu                         require_signed  "hmc2.onmicrosoft.com;ptr:imodules.com";
-hofstra.edu                     require_signed  "hofstra.edu,targetx.com,hofstra1edu.onmicrosoft.com";
+hofstra.edu                     require_signed  "hofstra.edu,targetx.com,*.targetx.com,hofstra1edu.onmicrosoft.com";
 holosonics.com                  require_signed  holosonics.ccsend.com;
 holts.com                       signed_white    icontactmail1.com;              // some unsigned mail from their own web server with no reverse dns not listed in their spf record
 homeaway.com                    require_signed  homeaway.com;
 homedepot.com                   require_signed  "homedepot.com;ptr:secureserver.net include:_spf.salesforce.com";
 home-mail.sophos.com            require_signed  home.sophos.com;
+homeshoppingworld.com           require_signed  homeshoppingworld-com.20150623.gappssmtp.com;
 hometalk.com                    require_signed  "hometalk.com,amazonses.com,icontactmail2.com";
 hometalkmedia.com               require_signed  hometalkusa.ccsend.com;
 honeywell.com                   require_signed  honeywell.com;
 hootsuite.com                   require_signed  hootsuite.com;
 hospitalitydental.com           require_signed  hospitalitydental.ccsend.com;
 housecallpro.com                require_signed  housecallpro.com;
 houseofgeoscience.org           require_signed  "sendgrid.info,mailplus.nl";
 houzz.com                       signed_white    houzz.com;                      // some unsigned mail via salesforce
 hq.acm.org                      require_signed  acmhq.onmicrosoft.com;
 hsbc.com                        require_signed  hsbc.com;
+hs.email.nextdoor.com           require_signed  email.nextdoor.com;
 htallc.com                      require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 hubs.com                        require_signed  hubs.com;
 hulumail.com                    require_signed  hulumail.com;
+hum.com                         require_signed  hum.com;
 hungryroot.com                  require_signed  "hungryroot.com,email.hungryroot.com";
 huntingpa.com                   require_signed  huntingpa.com;
 hvccpa.org                      require_signed  hvccpa-org.20150623.gappssmtp.com;
 hybris.com                      require_signed  myrandf.com;
 hyundaicustomerfeedback.com     require_signed  hyundaicustomerfeedback.com;
 hyundaimotors.com               require_signed  hyundaimotors.com;
+iab.com                         require_signed  iab.com;
 iamericaaction.org              signed_white    bounce.bluestatedigital.com;    // some unsigned via bluestatedigital as well
 ibotta.com                      require_signed  ibotta.com;
 id.apple.com                    require_signed  id.apple.com;
-idealprec.com                   require_signed  idealprec.ccsend.com;
+idealprec.com                   require_signed  "idealprec.com,idealprec.ccsend.com";
+ident.com                       require_signed  ident.com;                      // unsigned mail passes strong spf
+identity.constantcontact.com    require_signed  identity.constantcontact.com;
+identityforce.com               require_signed  identityforce.com;
 identity-morningstar.com        require_signed  identity-morningstar.com;
 identityprotection.norton.com   require_signed  identityprotection.norton.com;
-idsa.org                        require_signed  "*.ccsend.com";
+id.hp.com                       require_signed  id.hp.com;
+idsa.org                        require_signed  "mailchimpapp.net,*.ccsend.com";
 idscreates.com                  require_signed  idscreates-com.20150623.gappssmtp.com;
 ids.ups.com                     require_signed  ids.ups.com;                    // unsigned mail should pass spf -all
 ieee.org                        require_signed  "ieee-org.20150623.gappssmtp.com,cmail19.com,cmail20.com,amazonses.com";  // some unsigned survey mail via confirmit.com that fails spf
 ientry.info                     require_signed  ientry.net;
 ifixit.com                      require_signed  ifixit.com;
 ifm.com                         require_signed  ifm.com;
 ift.org                         signed_white    "connect.ift.org,ift1.onmicrosoft.com"; // broken sigs from connect.ift.org
 iheartmedia.com                 signed_white    iheartmedia.onmicrosoft.com;
 iiw.org                         require_signed  iiw.org;
 ijr.com                         require_signed  ijr.com;
+iluv.southwest.com              require_signed  iluv.southwest.com;
 imail.register.com              require_signed  imail.register.com;
 imdb.com                        require_signed  imdb.com;
 imprintprojects.com             require_signed  imprintprojects.com;
 improvementscatalog-email.com   require_signed  improvementscatalog-email.com;
 imt-mach.com                    require_signed  imt-mach.com;
 inbound.com                     require_signed  inbound.com;
 inbound.efax.com                require_signed  inbound.efax.com;               // unsigned mail should pass spf -all
 inbox.bissell.com               require_signed  inbox.bissell.com;
 independent.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+indielite.org                   require_signed  indielite.org;
 industrymarketingsolutions.com  require_signed  mail-202-169.rm0005.net;
+industrynews.online             require_signed  mg.industrynews.online;
 infinitytools.com               require_signed  "infinitytools.ccsend.com,remarkety.com";
 info1.networksolutions.com      require_signed  info1.networksolutions.com;
 info3.citibank.com              require_signed  info3.citibank.com;
+info3.citi.com                  require_signed  info3.citi.com;
 info4.citi.com                  require_signed  info4.citi.com;
 info5.accountonline.com         require_signed  info5.accountonline.com;
 info6.accountonline.com         require_signed  info6.accountonline.com;
 info6.citi.com                  require_signed  info6.citi.com;
+info.aessuccess.org             require_signed  info.aessuccess.org;
 info.bitdefender.com            require_signed  info.bitdefender.com;
 info.brother.com                require_signed  info.brother.com;
-info.cdw.com                    require_signed  info.cdw.com;
+info.cdw.com                    require_signed  "cdw.com,info.cdw.com";
 info.citibank.com               require_signed  "citibank.com,info.citibank.com";
 info.citrixdelivers.com         require_signed  info.citrixdelivers.com;
 info.comenity.net               require_signed  info.comenity.net;
 info.cynopsis.com               require_signed  "info.cynopsis.com,mktdns.com";
 info.ebay.com                   require_signed  info.ebay.com;
 info.key.com                    require_signed  info.key.com;
 info.mountaincreek.com          require_signed  info.mountaincreek.com;
 info.ms.aa.com                  require_signed  info.ms.aa.com;
+info.nbi-sems.com               require_signed  info.nbi-sems.com;
 info.prioritypass.com           require_signed  info.prioritypass.com;
 information.nature.com          require_signed  information.nature.com;
 info.sciex.com                  require_signed  info.sciex.com;
 info.stagnitomedia.com          require_signed  stagnito.cfmvmail.com;
 ingrammicro.com                 signed_white    "leadflight.net,pb-dynmktg.com";    // unsigned mail via pphosted, no spf record
 inmarket.com                    require_signed  "inmarket.com,*.hubspotemail.net";
 innovive.com                    require_signed  innovive-com.20150623.gappssmtp.com;
 inpower.ca                      require_signed  inpower-ca.20150623.gappssmtp.com;
 insideapple.apple.com           require_signed  insideapple.apple.com;
 insideradio.com                 require_signed  e2ma.net;
+insightics.com                  require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 inspirato.com                   require_signed  inspirato.com;
 inspire.pinterest.com           require_signed  inspire.pinterest.com;
-inspireschools.org              require_signed  inspireschools-org.20150623.gappssmtp.com;
+inspireschools.org              require_signed  "inspireschools-org.20150623.gappssmtp.com,mailchimpapp.net,amazonses.com";
+instacart.com                   require_signed  email.instacart.com;
 instamed.com                    require_signed  instamed.com;
 instoreaudionetwork.com         require_signed  instoreaudio.onmicrosoft.com;
 insurance.thehartford.com       require_signed  insurance.thehartford.com;
 intacct.com                     require_signed  intacct.com;
-interactive.wsj.com             require_signed  "interactive.wsj.com,wsj.com";
+integralads.com                 require_signed  integralads.com;
+interactive.wsj.com             require_signed  "wsj.com,interactive.wsj.com,cmail2.com";
 interactone.com                 require_signed  "mx-senderer-02.com,mx-senderer-03.com";
 interior-specialties.com        signed_white    "appriver3651009419.onmicrosoft.com,smtpcorp.com";
 internetbrands.com              require_signed  internetbrands.com;
 intervalintl.com                require_signed  iilg.onmicrosoft.com;
 inthenewsonline.com             require_signed  "*.shared.hubspot.com";
 intuit.com                      require_signed  intuit.com;
 intuitsolutions.net             require_signed  "affinitylive.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 invidtech.com                   require_signed  "auth.ccsend.com,zcsend.net";
 invista.com                     signed_white    "invista.com,kochind.onmicrosoft.com";  // some broken signatures from microsoft via pphosted
 invntree.com                    require_signed  invntree.com;
+invoicecloud.net                require_signed  mg.invoicecloud.com;
 ipipeline.com                   require_signed  ipipeline.onmicrosoft.com;
 ipushtech.com                   require_signed  pushtech.onmicrosoft.com;
 iriworldwide.com                require_signed  iriworldwide.com;
 iskysoft.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 ismgcorp.com                    require_signed  ismgcorp.com;
 iupdate.dnb.com                 require_signed  dnb.com;
 ixactcontact.com                require_signed  ixactcontact.com;
 jackseeds.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 jackthreads.com                 require_signed  jackthreads.com;
 jacpac.org                      require_signed  jacpac.ccsend.com;
-jakprints.com                   require_signed  "jakprints.com,jakprints-com.20150623";
+jakprints.com                   require_signed  "jakprints.com,jakprints-com.20150623.gappssmtp.com";
 jameco.com                      require_signed  jameco.com;
 jamestaylor.com                 require_signed  sh01.musvc.com;
 jamf.com                        require_signed  "jamfsw.onmicrosoft.com,jamf.com";
 jcresorts.com                   require_signed  jcresorts.com;
+jdog.com                        require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 jdrf.org                        signed_white    jdrf.org;                       // some unsigned mail via convio not included in their spf record
 jenjudge.com                    require_signed  emlr2.com;
 jerrysartarama.com              require_signed  jerrysartarama.com;
 jet.com                         signed_white    jet.com;                        // some unsigned mail from mailchimp that fails spf
 jewelscent.com                  require_signed  "*.klaviyomail.com";
 johnandkiras.com                require_signed  "johnandkiras.com,commercev3.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 johncanningco.com               require_signed  "spsend.com,actsend.com";
 johnmaxwell.com                 require_signed  email.johnmaxwell.com;
 johnstonortholab.com            require_signed  johnstonortholab.com;
 joshshapiro.org                 signed_white    bounce.bluestatedigital.com;
+jsalerts.matchedjobs.com        require_signed  jsalerts.matchedjobs.com;
 jstor.org                       require_signed  jstor.org;
 judsonsart.com                  require_signed  icontactmail3.com;
-justice.org                     require_signed  justice.org;
+justice.org                     require_signed  "justice.org,sendgrid.net";
 kaarmadealer.com                require_signed  kaarmadealer.com;
 kaiserhealthnews.org            require_signed  kff.org;
 kaleidescape.com                require_signed  kaleidescape.com;
 kamalaharris.org                signed_white    kamalaharris.org;
 kantar.com                      require_signed  "ktglbuc.onmicrosoft.com,icontactmail6.com";
 kantarmedia.com                 require_signed  "kantarmedia.com,ktglbuc.onmicrosoft.com,icontactmail3.com,icontactmail6.com";
+kargo.com                       require_signed  kargo.com;
 katzmedia.com                   require_signed  "katzmedia.com,iheartmedia.onmicrosoft.com,clearchannel.com,iheartmedia.com";
 kaydaly.com                     require_signed  "kaydaly.com,bluehornet.com";
 kbkg.net                        require_signed  kbkg.net;
 kcrw.org                        signed_white    "kcrw-org.20150623.gappssmtp.com,*.hubspot.com";    // unsigned from traffic@
 kennedy-center.org              require_signed  kennedy-center.org;
 keswicktheatre.com              signed_white    keswicktheatre.ccsend.com;      // some unsigned mail from their own servers
 keystoneline.com                require_signed  keystoneline.ccsend.com;
 kftv.com                        require_signed  kftv.com;
 kik.com                         require_signed  action.kik.com;
 kilo943.com                     require_signed  kilo943-com.20150623.gappssmtp.com;
+king5.com                       require_signed  tegna.onmicrosoft.com;          // mbmg vendor
 kingarthurflour.com             signed_white    kingarthurflour.com;            // some unsigned mail via salesforce
 kingscollegeinfo.org            require_signed  kingscollegeinfo.org;
 kinsmangarden.com               require_signed  "commercev3.com,icontactmail2.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 kmnewsletters.com               require_signed  kmnewsletters.com;
 knoll.com                       require_signed  knoll.com;
 knotandrope.com                 require_signed  "sendgrid.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 knowledge.onlinecompliancepanel.net require_signed  knowledge.onlinecompliancepanel.net;
-kofc.org                        require_signed  "kofc.onmicrosoft.com,www-kofc.ccsend.com";
+kofc.org                        require_signed  "kofc.onmicrosoft.com,kofc.ccsend.com,www-kofc.ccsend.com";
 komenphiladelphia.org           require_signed  komenphiladelphia.org;
 kovr.com                        signed_white    cbs.onmicrosoft.com;            // unsigned mail via pphosted
 kpbs.org                        require_signed  "kpbs.org,spsend.com";
 kqllc01.com                     require_signed  kqllc01.com;
 krem.com                        require_signed  tegna.onmicrosoft.com;
 kremp.com                       signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";    // some other unsigned mail, no spf record
 ksgcc.com                       require_signed  "ksgcc.com,ksgcc.onmicrosoft.com";
 kw.com                          require_signed  kw.com;
+l3harris.com                    require_signed  l3harris.com;
 labcorp.com                     require_signed  labcorp.com;
 laboratorytesting.com           require_signed  laboratorytesting.com;
+labusinessjournal.com           require_signed  labj.onmicrosoft.com;
 lacitylimo.com                  require_signed  "sendgrid.info,email-od.com,Citytransinc.onmicrosoft.com";
 lacity.org                      require_signed  lacity-org.20150623.gappssmtp.com;
 ladygrace.com                   require_signed  ladygrace.com;
 lakearrowheadchamber.com        signed_white    lakearrowhead.ccsend.com;       // some unsigned mail via unifiedlayer.com
+lamag.com                       require_signed  lamag.com;
+lamar.com                       require_signed  lamar.com;
 landarq.com                     require_signed  "landarq.com,landarq-com.20150623.gappssmtp.com";
 lanierlawfirm.com               require_signed  "cmail19.com,cmail20.com";
 laopera.org                     require_signed  "laopera.org,laopera.onmicrosoft.com";
 largeformatreview.com           require_signed  "amazonses.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 larryjohnsonspeaker.com         require_signed  priorityoneemail.com;
+lastpass.com                    require_signed  lastpass.com;
 latest.newsmax.com              require_signed  latest.newsmax.com;
-latimes.com                     require_signed  "latimes.com,nl.latimes.com";
+latimes.com                     require_signed  "latimes.com,nl.latimes.com,caltimes.onmicrosoft.com";
 latinworks.com                  require_signed  latinworks.onmicrosoft.com;
 laurenpennisi.com               require_signed  laurenpennisi-com.20150623.gappssmtp.com
 law360.com                      require_signed  "law360.com,mailings-alt.law360.com";
 laweekly-insider.com            require_signed  "laweekly-insider.com,pmta.sailthru.com";
 lawline.com                     require_signed  "*.lawline.com,icontactmail1.com,*.hubspotemail.net";
 lawyers.com                     require_signed  lawyers.com;
 lawyertechinfo.com              require_signed  "icontactmail2.com,icontactmail6.com";
 lazorlaw.com                    require_signed  johnlazor.onmicrosoft.com;
 lbccc.org                       require_signed  "lbccc.ccsend.com,www-lbccc.ccsend.com";
 lcius.com                       require_signed  lcius.onmicrosoft.com;
+leadbrite.com                   require_signed  center.io;                      // curtisyb
 leapinglizardssmyrna.com        require_signed  em.secureserver.net;
 ledbury.com                     require_signed  ledbury.com;
 ledgerwallet.com                require_signed  smtp.groovehq.com;
 lee.org                         require_signed  lee.org;                        // dmarc
 leerburg.com                    require_signed  amazonses.com;
 leeshoagiehouse.com             require_signed  leeshoagiehouse.ccsend.com;
 lefbc.com                       require_signed  lefbc.com;
 legalnewsupdate.com             require_signed  legalnewsupdate.ccsend.com;
+legal-x.com                     require_signed  legal-x.com;
 legrand.us                      require_signed  grpleg.onmicrosoft.com;
 lehighvalleychamber.org         require_signed  lehighvalleychamber.ccsend.com;
 levinperconti.com               require_signed  levinperconti.onmicrosoft.com;
 lexingtonmfg.com                require_signed  lexingtonmfg.com;
 lexisnexis.com                  require_signed  lexisnexis.com;
 lexmachina.com                  require_signed  lexmachina.com;
 lexusenform.com                 require_signed  lexusenform.com;
 lfw-media.com                   require_signed  lfw-media.com;
+lh1ondemand.com                 require_signed  lh1ondemand.com;                // exception to sendgrid blacklist
 liberty247.net                  require_signed  liberty247.net;
 libertyheadlines.com            require_signed  libertyheadlines.com;
 libertymutual.com               signed_white    libertymutual.com;              // some unsigned mail from their own servers
 lifeandstylemag.com             require_signed  lifeandstylemag.com;
 lifelock.com                    require_signed  lifelock.com;
 list.moveon.org                 require_signed  "list.moveon.org,moveon.org";
 lists.samba.org                 require_signed  lists.samba.org;
 lists.trialsmith.com            require_signed  lists.trialsmith.com            // unsigned mail but it passes spf
 littsquality.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 liveperson.com                  require_signed  liveperson.com;
+liveramp.com                    require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 llbgroup.com                    require_signed  "llbgroup.com,llbgrouptechsolutions.onmicrosoft.com";
 llnl.gov                        require_signed  doellnl.onmicrosoft.com;
 loanservicing.bankofamerica.com require_signed  loanservicing.bankofamerica.com;
 localjobservice.com             require_signed  localjobservice.com;
+loc.gov                         require_signed  loc.gov;                        // unsigned mail passes strong spf
 logees.com                      signed_white    "logees.com,logees.ccsend.com"; // some unsigned mail from their own servers that fails spf, broken sigs from their own server
 login.gov                       require_signed  login.gov;
 logistick.com                   require_signed  logistick.com;
 logmein.com                     require_signed  logmein.com;
 logomark.com                    require_signed  logomark.onmicrosoft.com;
+lojistic.com                    require_signed  lojistic.com;
 longbeachhonda.com              require_signed  "xtime.com,dealersocket.com";
 loseit.com                      require_signed  loseit.com;
 lovethe88.com                   require_signed  lovethe88-com.20150623.gappssmtp.com;
 loweekly.com                    require_signed  loweekly.com;
+lowes.com                       require_signed  lowes.com;
 loyaltyalliance.com             require_signed  "loyaltyalliance.com,mx-senderer-02.com,mx-senderer-03.com";
 loyalty.bloomingdales.com       require_signed  loyalty.bloomingdales.com;
 loyalty.ms.aa.com               require_signed  loyalty.ms.aa.com;
-lpl.com                         require_signed  "lpl.com,email01.fmgsuite.com";
+lpl.com                         require_signed  "lpl.com,email01.fmgsuite.com;include:_spf.salesforce.com";
 lqa.com                         require_signed  cp20.com;
 lrb.co.uk                       require_signed  lrb.co.uk;
 l.soma.com                      require_signed  l.soma.com;
-lsu.edu                         require_signed  lsu.edu;                        // unsigned, but should pass strong spf
+lsu.edu                         require_signed  lsu.edu;                        // unsigned mail passes strong spf
 ltsc.ucsb.edu                   require_signed  ltsc.ucsb.edu;
 lucidchart.com                  require_signed  lucidchart.com;
 luv.southwest.com               require_signed  luv.southwest.com;
 l.whitehouseblackmarket.com     require_signed  l.whitehouseblackmarket.com;
 lycra.com                       require_signed  lycra.onmicrosoft.com;
 magnaplate.com                  require_signed  magnaplate.com;
 maground.com                    require_signed  "*.acemsa4.com";
 mag.southernliving.com          require_signed  mag.southernliving.com;
 mail-1.bizjournals.com          require_signed  bizjournals.com;
 mail1.wellsfargo.com            require_signed  mail1.wellsfargo.com;
+mail2.disneyplus.com            require_signed  mail2.disneyplus.com;
 mail2.gofarrewards.wellsfargo.com require_signed  mail2.gofarrewards.wellsfargo.com;
 mail2.henrystewartpublications.com  require_signed  mail2.henrystewartpublications.com;
 mail2.wellsfargo.com            require_signed  mail2.wellsfargo.com;
 mail3.ams-cc.com                require_signed  ams-cc.com;
+mail3.creditkarma.com           require_signed  mail.creditkarma.com;
+mail4.creditkarma.com           require_signed  mail.creditkarma.com;
 mail5.avvo.com                  require_signed  mail5.avvo.com;
+mail5.creditkarma.com           require_signed  mail.creditkarma.com;
+mail6.creditkarma.com           require_signed  mail.creditkarma.com;
 mail7.creditkarma.com           require_signed  mail.creditkarma.com;
+mail8.creditkarma.com           require_signed  mail.creditkarma.com;
 mail.accounts.autodesk.com      require_signed  "email.accounts.autodesk.com,identity.autodesk.com";
+mail.aopa.org                   require_signed  mail.aopa.org;
 mail.authorize.net              require_signed  mail.authorize.net;
 mail.barnesandnoble.com         require_signed  "mail.barnesandnoble.com,bounceexchange.com";
 mail.bloombergbusiness.com      require_signed  mail.bloombergbusiness.com;
 mail.bonefishgrill.com          require_signed  mail.bonefishgrill.com;
 mail.bouqs.com                  require_signed  mail.bouqs.com;
 mailchimp.com                   require_signed  mailchimp.com;
 mail.citipricerewind.com        require_signed  mail.citipricerewind.com;       // stupid banks with multiple branding
 mail.crateandbarrel.com         require_signed  mail.crateandbarrel.com;
 mail.digiday.com                require_signed  mail.digiday.com;
 mail.disneydestinations.com     require_signed  mail.disneydestinations.com;
+mail.disneyplus.com             require_signed  mail.disneyplus.com;
 mail.efax.com                   require_signed  mail.efax.com;                  // unsigned mail should pass spf ~all
 mail.elsevier.com               require_signed  mail.elsevier.com;
 mailer.birchbox.com             require_signed  mailer.birchbox.com;
 mailer.box.com                  require_signed  box.com;
 mailer.cheaptickets.com         require_signed  mailer.cheaptickets.com;
 mailer.netflix.com              require_signed  netflix.com;
+mailer.procurify.com            require_signed  procurify.com;                  // payments for diane
 mailer.shopify.com              require_signed  shopify.com;
-mail.etsy.com                   require_signed  mail.etsy.com;
+mail.etsy.com                   require_signed  "etsy.com,mail.etsy.com;ptr:etsy.com ptr:mailjet.com";
 mail.eviteideas.com             require_signed  mail.eviteideas.com;
 mail.farmers.com                require_signed  mail.farmers.com;
 mail.feeln.com                  require_signed  mail.feeln.com;
 mail.fidelity.com               require_signed  mail.fidelity.com;
+mail.firstbankcard.com          require_signed  mail.firstbankcard.com;
 mail.glassdoor.com              require_signed  mail.glassdoor.com;
 mail.goodreads.com              require_signed  goodreads.com;
 mail.hbonow.com                 require_signed  mail.hbonow.com;
+mail.health.harvard.edu         require_signed  health.harvard.edu;
 mailhost.docuhost-net.com       require_signed  mailhost.docuhost-net.com;
 mail.hotels.com                 require_signed  mail.hotels.com;
 mail.idnotify.com               require_signed  mail.idnotify.com;
 mail.imparture.us               require_signed  mail.imparture.us;
 mail.instagram.com              require_signed  mail.instagram.com;
 mail.paypal.com                 require_signed  mail.paypal.com;
 mail.pbteen.com                 require_signed  mail.pbteen.com;
 mail.pictureframes.com          require_signed  mail.pictureframes.com;
 mail.potterybarn.com            require_signed  mail.potterybarn.com;
 mail.potterybarnkids.com        require_signed  mail.potterybarnkids.com;
+mail.ppi-news.com               require_signed  mail.ppi-news.com;
 mail.rejuvenation.com           require_signed  mail.rejuvenation.com;
 mail.remind.com                 require_signed  remind.com;
 mailreply.selectcomfort.com     require_signed  mailreply.selectcomfort.com;
+mail.route.com                  require_signed  mail.route.com;
 mails.avg.com                   require_signed  mails.avg.com;
 mail-saw.com                    require_signed  mail-saw.com;
 mail.scribd.com                 require_signed  "mail.scribd.com,bounceexchange.com";
 mail.service.thehartford.com    require_signed  mail.service.thehartford.com;
 mail.sharecare.com              require_signed  mail.sharecare.com;
 mail.southcommmail.com          require_signed  mail.southcommmail.com;
 mail.stashrewards.com           require_signed  mail.stashrewards.com;
 mail.statefarm.com              require_signed  mail.statefarm.com;
 mail.synchronybank.com          require_signed  mail.synchronybank.com;
 mail.synchronyfinancial.com     require_signed  mail.synchronyfinancial.com;
+mail.tdameritrade.com           require_signed  mail.tdameritrade.com;
+mail.usdelivery.org             require_signed  mail.usdelivery.org;            // unsigned mail passes strong spf
 mailva.evite.com                require_signed  mailva.evite.com;
 mail.vividseats.com             require_signed  mail.vividseats.com;
 mail.vresp.com                  require_signed  vresp.com;
 mail.westelm.com                require_signed  mail.westelm.com;
 mail.whitehouse.gov             require_signed  mail.whitehouse.gov;
+mail.wholefoodsmarket.com       require_signed  "mail.wholefoodsmarket.com,amazonses.com";
 mail.yelp.com                   require_signed  yelp.com;
 mail.zillow.com                 require_signed  mail.zillow.com;
 mainewhitewater.com             require_signed  northcountryrivers.ccsend.com;
 mainfreightusa.com              require_signed  mainfreightusa.com;
 maintain.se                     require_signed  minutemailer.com;
 marketing.qdoba.com             require_signed  marketing.qdoba.com;
 marketplace.amazon.ca           require_signed  amazon.ca;
 marketplace.amazon.com          require_signed  amazon.com;
 marquiscapemay.com              require_signed  "marquiscapemay.onmicrosoft.com,auth.ccsend.com";
 martindalemail.com              require_signed  martindalemail.com;
-martindalenolo.com              require_signed  "martindalenolo.com,lawyers.com";
+martindalenolo.com              require_signed  "martindalenolo.com,lawyers.com,sendgrid.net";
 marymorrissey.com               require_signed  marymorrissey.com;
 mastrocomm.com                  require_signed  twisteddune.ccsend.com;
 matadornetwork.com              require_signed  matadornetwork.com;
 match-cap.com                   require_signed  match-cap-com.20150623.gappssmtp.com;
 matildajaneclothing-email.com   require_signed  matildajaneclothing-email.com;
 mayo.edu                        signed_white    mayoclinic.com;                 // some unsigned via blackbaud (mailing list?), no spf record
 mcfinc.com                      require_signed  "mortgage-email.com,mcfinc-com.20150623.gappssmtp.com";
 mcmorrowreports.com             require_signed  mcmorrowreport.ccsend.com;
 mcnichols.com                   require_signed  "mcnichols-com.20150623.gappssmtp.com,bronto.com";
 mcsservices.com                 require_signed  mcsservicesinc.onmicrosoft.com;
+md-hq.com                       require_signed  md-hq.com;
 mdvip.com                       require_signed  mdvip.com;
 meainfo.org                     require_signed  meainfo.org;
-media-blasters.com              require_signed  media-blasters-com.20150623.gappssmtp.com;
+media-blasters.com              require_signed  "media-blasters-com.20150623.gappssmtp.com;ptr:google.com";
 mediabrains.com                 require_signed  mediabrains.com;
 mediaexperts.com                require_signed  mediaexpert.onmicrosoft.com;
 media.ieee.org                  require_signed  media.ieee.org;
 mediaocean.com                  require_signed  mediaocean13.onmicrosoft.com;   // unsigned mail from their own servers passes strong spf
 mediapost.com                   require_signed  mediapost.com;
 memberservices.latimes.com      require_signed  memberservices.latimes.com;
 members.jossandmain.com         require_signed  members.jossandmain.com;
 members.privatecolleges.com     require_signed  members.privatecolleges.com;
 member.starwoodhotelsemail.com  require_signed  member.starwoodhotelsemail.com;
 members.wayfair.com             require_signed  members.wayfair.com;
+membrasinlife.com               require_signed  rechargeapps.com;
 menard.messages1.com            require_signed  menard.messages1.com;
 mentor-protege.net              require_signed  1pointemail.net;
 meraki.net                      require_signed  meraki.net;
 merchant.bankofamerica.com      require_signed  merchant.bankofamerica.com;
 meredith.com                    require_signed  meredith.com;
 merrickbank.com                 require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 message.bbt.com                 require_signed  message.bbt.com;
 message.fedex.com               require_signed  message.fedex.com;
 message.merrilledge.com         require_signed  message.merrilledge.com;
-messages.autotrader.com         require_signed  messages.autotrader.com;
+messages.autotrader.com         require_signed  "messages.autotrader.com,gigya-raas.com;ptr:sparkpostmail.com";
 messages.cancer.org             require_signed  messages.cancer.org;
 message.scholastic.com          require_signed  message.scholastic.com;
 messages.clippers.com           require_signed  clippers.com;
 messages.cutco.com              require_signed  messages.cutco.com;
 message.sema.org                require_signed  message.sema.org;
 messages.kbb.com                require_signed  messages.kbb.com;
 messages.medicinenet.com        require_signed  messages.medicinenet.com;
 messages.squareup.com           require_signed  "messages.squareup.com,amazonses.com";
 messages.webmd.com              require_signed  messages.webmd.com;
 message.wine.com                require_signed  message.wine.com;
-messaging.squareup.com          require_signed  "messaging.squareup.com,amazonses.com";
+messaging.squareup.com          require_signed  messaging.squareup.com;
 messaging.usnews.com            require_signed  messaging.usnews.com;
 messaging.yelp.com              require_signed  yelp.com;
 messaging.zoosk.com             require_signed  messaging.zoosk.com;
 metroexhibits.com               require_signed  metroexhibits.com;
 metuchensportsplex.com          require_signed  rockvillesports.ccsend.com;
 mfp.underarmour.com             require_signed  mfp.underarmour.com;
 mg.hadco-metal.com              signed_white    mg.hadco-metal.com;             // unsigned via impactia.com
 mgmresorts.com                  require_signed  mgmresorts.com;
 mg.starbucks.com                require_signed  mg.starbucks.com;
+mhelp.co                        require_signed  "mhelp.co;include:sendgrid.net";    // sweeps luck chimney, broken dkim signature, but arrives via sendgrid
 mholland.com                    require_signed  mhollandco.onmicrosoft.com;
 mic.com                         require_signed  mic.com;
 michaelkorsemail.com            require_signed  michaelkorsemail.com;
 microcenterinsider.com          require_signed  microcenterinsider.com;
 microsoft.com                   require_signed  microsoft.com;
 microsoftonline.com             require_signed  microsoftonline.com;
+microsoftstoreemail.com         require_signed  "email.microsoftemail.com,microsoftstoreemail.com";
 midjerseychamber.org            require_signed  "*.ccsend.com";
 mileageplusshoppingnews.com     require_signed  mileageplusshoppingnews.com;
 mindbodygreen.com               require_signed  mindbodygreen.com;
 mindbodyonline.com              require_signed  "mindbodyonline.com,email.mindbodyonline.com";
 mindvalleyacademy.com           require_signed  blinkwebinars.mindvalley.com;
 mindvalley.com                  require_signed  appmail.mindvalley.com;
 minico.com                      require_signed  criticalimpactinc.com;
 minime.nsta.org                 require_signed  minime.nsta.org;
 minnesotavikingsemail.com       require_signed  minnesotavikingsemail.com;
 miraclesuit.com                 require_signed  "miraclesuit.com,amazonses.com";
+mkt.latimes.com                 require_signed  mkt.latimes.com;
 mlb.com                         require_signed  majorleaguebaseball.onmicrosoft.com;
 ml.com                          require_signed  ct-mail.ml.com;
 mlivenyc.com                    require_signed  cvent-planner.com;
-mmaglobal.com                   require_signed  mmaglobal.com;
+mmaglobal.com                   require_signed  "mmaglobal.com,mailchimpapp.net";
 m.mail.coursera.org             require_signed  m.mail.coursera.org;
 mmsonline.com                   require_signed  mmsonline.com;
 mms-updates.com                 require_signed  mms-updates.com;
 moasis.com                      require_signed  "moasis-com.20150623.gappssmtp.com,mailer3.zohocrm.com";
 mobileair.com                   require_signed  tiogahvac.onmicrosoft.com;
+mobilelinkgen.com               require_signed  mobilelinkgen.com;              // exception to sendgrid blacklist
 mobiletechinc.com               require_signed  mobiletechinc.onmicrosoft.com;
 mobivity.com                    require_signed  mobivity.com;
 mobvious.media                  require_signed  "mobvious.media,mailchimpapp.net";
+modbee.com                      require_signed  modbee.com;
+modernblaze.com                 require_signed  "reamaze.com,modernblaze-com.20150623.gappssmtp.com";
 modernmsg.com                   require_signed  "modernmsg.com,delivery.customeriomail.com";
 moes.com                        require_signed  email.punchh.com;
 momentumdash.com                require_signed  momentumdash.com;
 momentummgt.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 momscleanairforce.org           require_signed  server8839.e-activist.com;
+monday.com                      require_signed  monday.com;
 monotype.com                    require_signed  monotype.com;
 monster.com                     signed_white    monster.com;                    // some unsigned mail via mailsorter.be.tmpw.net
 monsterequip.com                require_signed  icontactmail6.com;
 monsterscooterparts.com         require_signed  monsterscooterparts.com;
+montereyjazzfestival.org        require_signed  "auth.ccsend.com,mailchimpapp.net,bloomerang-mail.com";
 morning7.theskimm.com           require_signed  morning7.theskimm.com;
 morrishabitat.org               require_signed  morrishabitat.ccsend.com;
 mortgagebankamerica.com         require_signed  emarketfocus.com;
 mosacks.com                     require_signed  mg.mosacks.com;
 mosaic.buzz                     require_signed  mosaic728.onmicrosoft.com;
 movavi.com                      require_signed  "mandrillapp.com,mailchimpapp.net,movavi.com";
+moveo.com                       signed_white    "moveo.com;ptr:moveo.com";      // unsigned mail, no spf record so we create one
 moveon.org                      require_signed  list.moveon.org;
 movies.fandango.com             require_signed  movies.fandango.com;
 movies.fandangonow.com          require_signed  movies.fandangonow.com;
 mp1.tripadvisor.com             require_signed  mp1.tripadvisor.com;
 mp.fitbit.com                   require_signed  mp.fitbit.com;
 m.taxslayer.com                 require_signed  m.taxslayer.com;
 mtb.com                         require_signed  mtb.com;
 mtbopinions.com                 require_signed  mtbopinions.com;
 muckfestms.com                  require_signed  muckfestms.com;
 multibriefs.com                 require_signed  multibriefs.com;
+multiview.com                   require_signed  multiview.com;
 murphy4nj.com                   require_signed  "murphy4nj-com.20150623.gappssmtp.com,bounce.bluestatedigital.com";
 murphyforflorida.com            signed_white    bounce.bluestatedigital.com;
 musicacademy.org                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 musictoday.com                  require_signed  "mg.musictoday.com,musictoday.com";
 musictogether.com               signed_white    musictogether.ccsend.com;       // some unsigned mail via mail.musictogether.com
+mvmediasales.com                require_signed  "mvmediasales.com,sendgrid.me";
 mvsend.com                      require_signed  mvsend.com;
 mxtoolbox.com                   require_signed  mxtoolbox.com;
 myamextravel.com                require_signed  myamextravel.com;
 my.ba.com                       require_signed  my.ba.com;
 mybbb.org                       require_signed  "mybbb.org,auth.ccsend.com";
-mycase.com                      require_signed  "mycase.com,mycase-com.20150623.gappssmtp.com;include:_spf.salesforce.com";
+mycase.com                      require_signed  "mycase.com,mycase-com.20150623.gappssmtp.com;ptr:zuora.com include:_spf.salesforce.com";
 my.containerstore.com           require_signed  my.containerstore.com;
 myddi.com                       require_signed  myddi.com;
 myemma.com                      require_signed  myemma.com;
 my.erau.edu                     require_signed  myerauedu.onmicrosoft.com;
 myfinancialbodyguard.com        require_signed  myfinancialbodyguard-com.20150623.gappssmtp.com;
 my.orbitz.com                   require_signed  my.orbitz.com;
 myperfectresume.com             require_signed  myperfectresume.com;
 myphillypark.org                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 mypromosupport.com              require_signed  mypromosupport.com;
 myrandf.com                     require_signed  myrandf.com;
+myschoolaccountnotifications.com   require_signed  myschoolaccountnotifications.com;
 myschoolemails.com              require_signed  myschoolemails.com;
+my.smartvault.com               require_signed  my.smartvault.com;
 my.store-emails.com             require_signed  my.store-emails.com;
 mystubhub.com                   require_signed  mystubhub.com;
 na.email.aa.com                 require_signed  na.email.aa.com;
 nagr.org                        require_signed  nagr.org;
 nailgundepot.com                require_signed  "nailgundepot.com,auth.ccsend.com";
 new.itunes.com                  require_signed  new.itunes.com;
 newletters.grccompliances.com   require_signed  newletters.grccompliances.com;
 news.alibris.com                require_signed  news.alibris.com;
 newsamerica.com                 require_signed  newsamerica-com.20150623.gappssmtp.com;
 news.bisnow.com                 require_signed  news.bisnow.com;
-news.bodybuilding.com           require_signed  news.bodybuilding.com;
+news.bodybuilding.com           require_signed  "news.bodybuilding.com,bodybuilding.com";
 news.classiccarrestorationclub.com require_signed  news.classiccarrestorationclub.com;
 news.conservativeintel.com      require_signed  news.conservativeintel.com;
 news.dbr.com                    require_signed  cecollect.com;
 news.gucci.com                  require_signed  "news.gucci.com,contactlab.it";
 news.healthylifestylearena.com  require_signed  news.healthylifestylearena.com;
-news.hellofresh.com             require_signed  news.hellofresh.com;
+news.hellofresh.com             require_signed  "news.hellofresh.com,sendgrid.net";
 news.hickoryfarms.com           require_signed  news.hickoryfarms.com;
+news.law                        require_signed  mailchimpapp.net;
 newsletter.247sports.com        require_signed  newsletter.247sports.com;
 newsletter.gearbest.com         require_signed  newsletter.gearbest.com;
 newsletter.movietickets.email   require_signed  newsletter.movietickets.email;
 newsletter.newyorker.com        require_signed  newsletter.newyorker.com;
 newsletter.pilotflyingj.com     require_signed  newsletter.pilotflyingj.com;
 newwavetech.com                 require_signed  icontactmail3.com;
 nexcopy.com                     require_signed  nexcopy-com.20150623.gappssmtp.com;
 nextdayflyers.com               require_signed  nextdayflyers.com;
 nfib.org                        require_signed  "nfib.org;include:_spf.salesforce.com";
 nfibweekly.bulletinmedia.com    require_signed  bulletinmedia.com;
+nhm.org                         require_signed  nhm-org.20150623.gappssmtp.com;
 nice.com                        require_signed  nice.com;
 nickeygregory.com               require_signed  nickeygregory-com.20150623.gappssmtp.com;
-nielsen.com                     require_signed  "nielsen-com.20150623.gappssmtp.com,sendgrid.net;ptr:nielsenmedia.com";
+nielsen.com                     require_signed  "nielsen-com.20150623.gappssmtp.com,sendgrid.net,mktomail.com;ptr:nielsenmedia.com include:_spf.salesforce.com";
 nielsen-email.com               require_signed  nielsen-email.com;
 nisolo.com                      require_signed  nisolo.com;
 njbiz.com                       require_signed  "journalpub1.onmicrosoft.com,njbiz.com";
 njsba.com                       signed_white    "njsba.com,bluehornet.com";     // some broken signatures from bluehornet
+njstart.gov                     require_signed  mail.njstart.gov;
 nl.neuralit.com                 require_signed  nl.neuralit.com;
+nl.npr.org                      require_signed  nl.npr.org;
 nmajh.org                       require_signed  nmajh.ccsend.com;
+nmk.independentinc.com          require_signed  nmk.independentinc.com;
 nmk.printegra.com               require_signed  nmk.printegra.com;
 nmss.org                        require_signed  "muckfestms.com,mta-bbcspool.convio.net";
 noozhawk.com                    require_signed  noozhawk.com;
 nordstrom.com                   require_signed  "nordstrom.com,amazonses.com";
 noreply1.ebay.com               require_signed  ebay.com;
 noreply.autodesk.com            require_signed  noreply.autodesk.com;
 noreply.collegeboard.org        require_signed  noreply.collegeboard.org;
 noreply.email.carfax.com        require_signed  email.carfax.com;
 noreply.org                     signed_black    sendgrid.net;                   // apple support scam
 noreply.stockwatch.com          require_signed  noreply.stockwatch.com;
+northampton.edu                 require_signed  nacc.onmicrosoft.com;           // allow bounces
 northcountryrivers.com          require_signed  northcountryrivers.ccsend.com;
 northlightcolor.com             require_signed  northlightcolor.ccsend.com;
-northwestern.edu                require_signed  iwsend.com;
+northwestern.edu                require_signed  "iwsend.com,mktomail.com";
 notices.rei.com                 require_signed  notices.rei.com;
+noticiasdepanama.com            require_signed  mailchimpapp.net;
 notification.capitalone.com     require_signed  notification.capitalone.com
 notification.intuit.com         require_signed  notification.intuit.com;
 notifications.gmfinancial.com   require_signed  notifications.gmfinancial.com;
 notifications.intuit.com        require_signed  notifications.intuit.com;
 notifications.networksolutions.com require_signed  notifications.networksolutions.com;
 npr.org                         require_signed  npr.org;                        // some unsigned mail via pphosted should pass strong spf
 npsights.com                    require_signed  rnsights.com;
 nrailafrontlines.com            require_signed  nrailafrontlines.com;
 nrdc.org                        require_signed  nrdc1.onmicrosoft.com;
 nsbaadvocate.com                require_signed  mmsend.com;
-ntlpartner.com                  require_signed  "*.getresponse.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+n.skinstore.com                 require_signed  n.skinstore.com;
+ntlpartner.com                  require_signed  "amazonses.com,*.getresponse.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 nvie.nevada.edu                 require_signed  nevadaie.ccsend.com;
+nychhc.org                      require_signed  nychhc.org;
 nyiad.edu                       require_signed  icontactmail1.com;
 nytimes.com                     signed_white    "nytimes.com,nytimes-com.20150623.gappssmtp.com";   // some unsigned mail via navisite.net not listed in their spf record
 oaktreecapital.com              require_signed  oaktreecapital.com;
 oakwoodveneer.com               require_signed  em.secureserver.net;
 oath.com                        require_signed  oath.com;
 okta.com                        require_signed  okta.com;
 oldies.com                      require_signed  oldies.com;
 oldnavy.com                     require_signed  oldnavy.com;
 olmcatholicschool.com           require_signed  "olmcatholicschool-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 olmrcs.com                      require_signed  olmrcs-com.20150623.gappssmtp.com;
+om.cynopsis.com                 require_signed  om.cynopsis.com;
 omegamoulding.com               signed_white    omega-moulding-company.ccsend.com;  // unsigned mail from their own servers, broken spf record so no fallback
 online.att-mail.com             require_signed  online.att-mail.com;
 onlineaudiotraining.com         require_signed  onlineaudiotraining.com;
 online.costco.com               require_signed  online.costco.com;
 online.essentra.com             require_signed  online.essentra.com;
 oppenheimerfunds.com            require_signed  oppenheimerfunds.com;
 ops.bloomingdales.com           require_signed  ops.bloomingdales.com;
 optx2020.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 orastudios.com                  require_signed  orastudios.com;
 orbuscompany.com                require_signed  orbuscompany.onmicrosoft.com;
-orbus.com                       require_signed  "orbuscompany.onmicrosoft.com,orbus.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+orbus.com                       require_signed  "orbus.com,orbuscompany.onmicrosoft.com,orbus.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+order.homedepot.com             require_signed  order.homedepot.com;
 order.potterybarnkids.com       require_signed  order.potterybarnkids.com;
 orders.homedepot.com            require_signed  orders.homedepot.com;
+orders.truevalue.com            require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 order.williams-sonoma.com       require_signed  order.williams-sonoma.com;
 oriphe.com                      require_signed  veryvp.net;
 os-email.com                    require_signed  os-email.com;
 os-media.com                    require_signed  os-media.com;
 osv.com                         require_signed  osvparish.ccsend.com;
 ottingergolf.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net,scotlandrun.ccsend.com";
 ottolearn.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 ourrevolution.com               require_signed  ourrevolution.com;
 ourtime.com                     require_signed  ourtime.com;
+ourweekly.com                   require_signed  ourweekly-com.20150623.gappssmtp.com;
 outdoorfest.com                 require_signed  outdoorfest.com;
 outfrontmedia.com               require_signed  "cbsoa.onmicrosoft.com,auth.ccsend.com";
 outlooknewspapers.com           require_signed  outlooknewspapers.onmicrosoft.com;
 outsiderclub.com                require_signed  "outsiderclub.com,bluehornet.com";
 outsource.com                   require_signed  outsource.com;
 paalerts.com                    require_signed  paalerts.com;                   // broken signatures, but passes spf
 pac-cap.com                     require_signed  thelakearrowheadvillage.ccsend.com;
 pacific.edu                     require_signed  "imodules.com,bluehornet.com";
 pacificmachinetools.com         require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 pacmail.em.marketinghq.net      require_signed  pacmail.em.marketinghq.net;
+pa.gov                          signed_white    "pa.gov,auth.ccsend.com;ptr:pa.gov"     // pa.gov employer list
 paintingwithatwist.com          require_signed  paintingwithatwist-com.20150623.gappssmtp.com;
 paintsquare.com                 require_signed  paintsquare.com;
 palazzodelsol.com               require_signed  icontactmail1.com;
+palazzonyc.com                  require_signed  auth.ccsend.com;
 palimountain.com                require_signed  palimountain.onmicrosoft.com;
 palmislandcaribbean.com         require_signed  zmaildirect.com;
 paloma.washingtonpost.com       require_signed  paloma.washingtonpost.com;
-pandora.com                     require_signed  "pandora.com,sg.pandora.com";
+pandora.com                     require_signed  "pandora.com,sg.pandora.com;ptr:oraclecloud.com";
 panerabreadnews.com             require_signed  panerabreadnews.com;
 pangeabuilders.com              require_signed  pangeabuilders.com;
 panitchlaw.com                  require_signed  panitchlaw.onmicrosoft.com;
 paperlesspost.com               require_signed  "paperlesspost.com,*.paperlesspost.com";
 paradigmimaging.com             require_signed  "store.smtp.bigcommerce.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 parallels-universe.com          require_signed  parallels-universe.com;
 paramountsign.com               require_signed  "email.shopvox.com,paramountsign-com.20150623.gappssmtp.com"
 parcelpending.com               require_signed  parcelpending.com;
+parchment.com                   require_signed  parchment.com;
 parkrideflyusa.com              require_signed  "yo155.com,publicaster.com,bsftransmit7.com";
 partners.woodsmith.com          require_signed  partners.woodsmith.com;
 partsgeek.com                   require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com,partsgeek.ccsend.com";
 pasadenaindependent.com         require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-pasadenarose.com                require_signed  "pasadenarose-com.20150623.gappssmtp.com,*.ccsend.com,*.hubspotemail.net";
+pasadenarose.com                require_signed  "pasadenarose-com.20150623.gappssmtp.com,*.ccsend.com,*.hubspotemail.net,*.hubspot.com";
 passyunk.org                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 pastorrick.com                  require_signed  bluehornet.com;
+patch.com                       require_signed  patch.com;
 patientconnect365.com           require_signed  patientconnect365.com;
 patients.pgsurveying.com        require_signed  patients.pgsurveying.com;
 patreasury.gov                  require_signed  patreasury.gov;
 patriotsofamerica.com           require_signed  patriotsofamerica.com;
 patriotvideos.net               require_signed  patriotvideos.net;
 pay.amazon.com                  require_signed  amazon.com;
 paychex.com                     require_signed  paychex.com;
 paylocity.com                   require_signed  paylocity.com;
+paymentdepot.com                require_signed  chargify.com;
 paypal.com                      require_signed  paypal.com;
 payproglobal.com                require_signed  email.payproglobal.com;
 payrollcentric.com              require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com,em.evolutionhcm.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net;ptr:shspma.com";
 payrollcentric.zendesk.com      require_signed  "gmailmarkup.zendesk.com,zendesk.com";
 payroll.fidelity.com            require_signed  payroll.fidelity.com;
 pda.org                         require_signed  pda.org;
 pdffiller.com                   require_signed  pdffiller.com;
 peakhourapp.com                 require_signed  "peakhourapp-com.20150623.gappssmtp,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 pearison.com                    require_signed  pearison.onmicrosoft.com;
 peavit.com                      require_signed  netorgft2525885.onmicrosoft.com;
+peco.com                        require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 pemail.lq.com                   require_signed  pemail.lq.com;
 pennfuture.org                  require_signed  salsalabs.org;
 pennockins.com                  require_signed  pennockins.ccsend.com;
+pennstateoffice365.onmicrosoft.com  require_signed  pennstateoffice365.onmicrosoft.com; // allow bounces
 pennsylvanialotteryemail.com    require_signed  pennsylvanialotteryemail.com;
 pennsys.com                     signed_white    quosal.com;                     // some unsigned mail
 penske.com                      require_signed  penske.com;
 peralta.edu                     require_signed  peralta4.onmicrosoft.com;
 perfectpotluck.com              require_signed  perfectpotluck.com;
 phelpsmediagroup.com            require_signed  "phelpsmediagroup.ccsend.com,auth.ccsend.com";
 philadelphiarunner.com          require_signed  philadelphiarunner.ccsend.com;
 phila.gov                       signed_white    "phila.onmicrosoft.com,auth.ccsend.com";    // unsigned via exacttarget not listed in their spf record
 philamuseum.org                 signed_white    "cmail19.com,cmail20.com";      // some unsigned mail via outlook
 philly.com                      require_signed  philly.com;
-phillyfitmagazine.com           require_signed  phillyfit.ccsend.com;
+phillyfitmagazine.com           require_signed  "phillyfit.ccsend.com,aweber.com";
 phillyleagues.com               require_signed  phillyleagues.ccsend.com;
 phillynewssubscriptionservices.com      require_signed  phillynewssubscriptionservices.com;
 phillypaws.org                  require_signed  icontactmail9.com;
 phillypops.org                  require_signed  phillypops.org;
 phillytrib.com                  require_signed  phillytrib.com;
 philmontcc.org                  require_signed  philmontcc.org;
 philorch.org                    require_signed  philorch.org;
-phone.com                       require_signed  "phone.com;ptr:phone.com";      // unsigned mail, but passes strong spf
+phone.com                       require_signed  "phone.com;ptr:phone.com ptr:amazonses.com";
 photoemail.walgreens.com        require_signed  photoemail.walgreens.com;
 phs.org                         require_signed  phs.org;
-physiqonomics.com               require_signed  "ckmail4.com,*.convertkit.com";
+physiqonomics.com               require_signed  "ckmail4.com,*.convertkit.com,*.ckdlv.net;ptr:convertkit.com";
 piab.com                        require_signed  piab.com;
 pianet.org                      require_signed  "moon-ray.com,mmsend.com";
 pika-energy.com                 require_signed  pika-energy-com.20150623.gappssmtp.com;
 pimed.com                       require_signed  lists.jobsonmail.com;
 pimhendriksen.com               require_signed  emlr2.com;
 pinebrookroasters.com           require_signed  netorgft1374413.onmicrosoft.com;
 pipmag.com                      require_signed  pipmag.com;
+pkckenya.com                    require_signed  pkckenya.com;
 plaintiffsolutionscenter.com    require_signed  plaintiffsolutionscenter.ccsend.com;
 plaintiffsolutions.com          require_signed  thelienresolutiongroup.ccsend.com;
 planetcyclery.com               require_signed  sendgrid.net;
+pluto.tv                        require_signed  pluto.tv;                       // mbmg vendor
 pmc.com                         require_signed  pmc.com;
+pmd.media                       require_signed  "pmd.media,pmd-media.20150623.gappssmtp.com";
 pmrgi.com                       require_signed  cvent-planner.com;
 pnc.com                         require_signed  pnc.com;
+podcastone.com                  require_signed  courtsidems.onmicrosoft.com;
 pods.com                        require_signed  pods.com;
 politico.com                    require_signed  politico.com;
 politicoemail.com               require_signed  politicoemail.com;
 pond5.com                       require_signed  e.pond5.com;
 pony.org                        require_signed  pony.ccsend.com;
 poolhost.com                    require_signed  "poolhost.com,amazonses.com";
 popmoney.com                    require_signed  popmoney.com;
 popsugar.com                    signed_white    "popsugar.com,auth.ccsend.com"; // unsigned mail via netsuite
 portal.io                       require_signed  portal-io.20150623.gappssmtp.com;
 poshmark.com                    require_signed  email.poshmark.com;
+post.com                        require_signed  post.com;
 postergarden.com                require_signed  postergarden.com;
 powell.com                      require_signed  powell.com;
 ppfa.org                        require_signed  ppfa.org;
 precise-law.com                 require_signed  "preciseinc1.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 preferredcfo.com                require_signed  preferredcfo-com.20150623.gappssmtp.com;
 premierenergygroup.com          require_signed  premierenergygroup.ccsend.com;
 premiergoldupdate.com           require_signed  premiergoldupdate.com;
+premiummedia360.com             require_signed  premiummedia360.com;
 premium.shiftdailynews.com      require_signed  premium.shiftdailynews.com;
 premiumstore.com                require_signed  premiumstore.com;
+prepressproofs.com              require_signed  eoncode.com;
 presscorp.org                   require_signed  presscorp.org;
 primalsourcenews.com            require_signed  primalsourcenews.com;
+primera.com                     require_signed  primera.com;
 princetheater.org               signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 printavo.com                    require_signed  printavo.com;
 printmediamn.com                require_signed  northlightcolor.ccsend.com;
 printpack.com                   require_signed  printpack-com.20150623.gappssmtp.com;
 privy.com                       require_signed  privy.com;
 prodivnet.com                   require_signed  email.prodivnet.com;
 producersesourcenews.com        require_signed  producersesourcenews.com;
 productionmachining.com         require_signed  productionmachining.com;
 progmechs.com                   require_signed  netorg1358023.onmicrosoft.com;
 progressiveagent.com            require_signed  b2b-mail.net;
+promotions.overstock.com        require_signed  promotions.overstock.com;
 proofhq.com                     require_signed  proofhq.com;
+proofreadanywhere.com           require_signed  "proofreadanywhere.com,sendgrid.net";
 prop.trulia.com                 require_signed  prop.trulia.com;
 prospecthillco.com              require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 protradertoday.com              require_signed  protradertoday.com;
 providesupport.com              require_signed  providesupport.com;
 proxyvote.com                   require_signed  proxyvote.com;
 prucentermail.com               require_signed  prucentermail.com;
 pslgroup.com                    require_signed  pslgroup.com;
 p.spiritairlines.com            require_signed  p.spiritairlines.com;
 pssl.com                        require_signed  pssl.com;
 psu.edu                         signed_white    icontactmail4.com;              // some unsigned mail from their own servers with no spf txt record
+ptcezpassmail.com               require_signed  ptcezpassmail.com;
 ptcommunity.com                 require_signed  mmmm.ccsend.com;
 ptc.starwoodhotelsemail.com     require_signed  ptc.starwoodhotelsemail.com;
 p.tigerdirect.com               require_signed  p.tigerdirect.com;
 ptynews.info                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 publicdomainreview.org          require_signed  "publicdomainreview.org,amazonses.com"; // some broken signatures (missing dns key) from publicdomainreview.org
 quellrelief.com                 require_signed  "quellrelief.com,*.hubspotemail.net"
 quenchagency.com                require_signed  quenchagency-com.20150623.gappssmtp.com;
 questdiagnostics.com            require_signed  inbound.dcm8.com;
 questexnetwork.com              require_signed  questexnetwork.com;
 quinnipiac-info.org             require_signed  quinnipiac-info.org;
-quora.com                       require_signed  "quora.com,email.quora.com";
+quora.com                       require_signed  quora.com;
 quote01.email-allstate.com      require_signed  quote01.email-allstate.com;
 quotemyumbrella.com             require_signed  icontactmail2.com;
 quotient.com                    signed_white    couponsinc.onmicrosoft.com;     // some unsigned mail via salesforce
 racewire.com                    require_signed  racewire.com;
 rackspace.com                   require_signed  cp.rackspace.com;
+radio-one.com                   require_signed  urbanone.onmicrosoft.com;
 radke.co                        require_signed  radke-co.20150623.gappssmtp.com;
 raise3d.freshdesk.com           require_signed  freshdesk.com;
+raise3d.us                      require_signed  "raise3dus.onmicrosoft.com,amazonses.com";
 raleysstores.com                require_signed  raleysstores.com;
 rallypoint.com                  require_signed  rallypoint.com;
 randjsc.com                     require_signed  randjsc.onmicrosoft.com;
 randpac.com                     require_signed  bluehornet.com;
 randstadusa.com                 require_signed  "*.randstadusa.com";
 ravepro.com                     require_signed  icontactmail1.com;
 rbc.com.pa                      require_signed  "rbc-com-pa.20150623.gappssmtp.com,mpdkim2.ch";
 rcam.target.com                 require_signed  rcam.target.com;
 rcg-la.com                      require_signed  rcg-la.ccsend.com;
 realage-mail.com                require_signed  realage-mail.com;
+recordedbooks.com               require_signed  recordedbooks.com;
 recordreform.com                require_signed  medquest.ccsend.com;
 reddit.com                      require_signed  reddit.com;
 redheartland.com                require_signed  redheartland.com;
 redlandstruckservice.com        require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 redtri.com                      require_signed  "redtri-com.20150623.gappssmtp.com,redtri.com,amazonses.com";
-refinery29.com                  require_signed  "refinery29.com,refinery29-com.20150623.gappssmtp.com";
+refinery29.com                  require_signed  "refinery29.com,refinery29-com.20150623.gappssmtp.com,pmta.sailthru.com";
 regus.com                       signed_white    "regus.com,regusgroupservices.onmicrosoft.com,mandrillapp.com,mailchimpapp.net"; // some unsigned mail from e-dunning
 rel1.aeroplan.com               require_signed  rel1.aeroplan.com;
+relatient.net                   require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 religioussupply.com             require_signed  "religioussupplies.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+remarkety.com                   require_signed  "remarkety.com,remarkety-com.20150623.gappssmtp.com";
 reminder10.creditkarma.com      require_signed  reminder.creditkarma.com;
 reminder11.creditkarma.com      require_signed  reminder.creditkarma.com;
 reminder5.creditkarma.com       require_signed  reminder.creditkarma.com;
 reminder6.creditkarma.com       require_signed  reminder.creditkarma.com;
 reminder7.creditkarma.com       require_signed  reminder.creditkarma.com;
 reminder8.creditkarma.com       require_signed  reminder.creditkarma.com;
 reminder9.creditkarma.com       require_signed  reminder.creditkarma.com;
 reminder.honda.com              require_signed  reminder.honda.com;
 remindmemd.com                  require_signed  remindmemd.com;
+renovationbrands.com            require_signed  renovationbrands.com;
 rentalcars.com                  require_signed  rentalcars.com;
+rentcafe.com                    require_signed  rentcafe.com;
 rentlooker.site                 require_signed  amazonses.com;
-rentmanager.com                 require_signed  rentmanager.com;                // unsigned, but passes strong spf
+rentmanager.com                 require_signed  rentmanager.com;                // unsigned mail passes strong spf
 replies.charlestyrwhitt.com     require_signed  replies.charlestyrwhitt.com;
 reply1.ebay.com                 require_signed  reply1.ebay.com;
 reply.boltonpac.com             require_signed  reply.boltonpac.com;
 reply.broadwaydiscounts.com     require_signed  "reply.broadwaydiscounts.com,broadwaydiscounts.com";
 reply.bronto.com                require_signed  bronto.com;
 rht.com                         require_signed  roberthalf.onmicrosoft.com;
 ricardoalmeida.com              require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 richardsolomonreplies.com       require_signed  richardsolomonreplies.com;
 richmondproductions.com         signed_white    richmondproductions-com.20150623.gappssmtp.com; // diane@solvang
 rickwarren.org                  require_signed  bluehornet.com;
-rimage.com                      require_signed  "rimagede.onmicrosoft.com,mail.wpengine.com";   // some unsigned mail passes strong spf
+rightsignature.com              require_signed  rightsignature.com;
+rimage.com                      require_signed  "rimagede.onmicrosoft.com,mail.wpengine.com,auth.ccsend.com";   // some unsigned mail passes strong spf
 rimsd.k12.ca.us                 require_signed  rimoftheworldu.onmicrosoft.com;
 riogrande.com                   require_signed  riogrande.com;
+ripe.net                        require_signed  ripe.net;                       // spam does not pass spf check
 riponprinters.com               require_signed  riponprinters.ccsend.com;
 rismedia-enews.com              require_signed  rismedia-enews.com;
 rittenhousehotel.com            require_signed  contact-client.com;
 ritz-ritz.us                    require_signed  ritz-ritz.us;
+riverla.org                     require_signed  riverla.org;
 rlsassociates.com               require_signed  icontactmail3.com;
-rmsmg.com                       require_signed  rmsmg.com;                      // opoc_leaking for mbmg client
+rmsmg.com                       require_signed  "rmsmg.com,mailchimpapp.net";                      // opoc_leaking for mbmg client
 roberthalf.com                  signed_white    roberthalf.onmicrosoft.com;     // some unsigned via geninfo.com
 robsonforensic.com              signed_white    "*.shared.hubspot.com";         // unsigned mail from their barracuda servers
 roku.com                        signed_white    roku.onmicrosoft.com;           // unsigned billing mail via ariasystems.net not listed in their spf record
 roomster.com                    require_signed  roomster.com;
 rosewe.com                      require_signed  rosewe.com;
 roundabouttheatre.org           require_signed  roundabouttheatre.org;
+route.com                       require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 route.monster.com               require_signed  monster.com;
 rply.b21pubs.com                require_signed  netatlantic.com;
 rrca.org                        require_signed  rrca.ccsend.com;
 rs.email.nextdoor.com           require_signed  email.nextdoor.com;
 rsu21.net                       require_signed  rsu21.net;
 scewebservices.com              require_signed  scewebservices.com;
 schedulepayment.com             require_signed  schedulepayment.com;
 schoology.com                   require_signed  email.schoology.com;
 schoox.com                      require_signed  mail.intercom.io;
 sciquest.com                    require_signed  sciquest.com;                   // unsigned mail passes strong spf
+scng.com                        require_signed  scng.com;
 scoremorerewards.com            require_signed  scoremorerewards.com;
 scotnery.com                    require_signed  scotnery.com;
 scottthomasid.com               require_signed  scottthomasid.com;
 scoutbook.com                   require_signed  scoutbook.com;
 scouting.org                    require_signed  "scouting.org,doubleknot.com,scouting.ccsend.com";
 scoutmob.com                    require_signed  scoutmob.com;
 screamervision.com              require_signed  screamervision-com.20150623.gappssmtp.com;
 scripps.com                     require_signed  ewscripps.onmicrosoft.com;
+scrippstv.com                   require_signed  scrippstv.com;                  // mbmg client
+scsemails.ups.com               require_signed  scsemails.ups.com;
 scup.org                        require_signed  em.secureserver.net;
 scwmediasystems.com             signed_white    outlook.com;
 sdi.com                         require_signed  sdi2.onmicrosoft.com;
 seatgeek.com                    require_signed  seatgeek.com;
 seatme.com                      require_signed  seatme.com;
+seattleradio.com                require_signed  sbgi.onmicrosoft.com;
 secondstreet.com                require_signed  secondstreet.com;
 secure.com                      require_signed  secure.com;                     // spf -all, no dmarc record
 securedata-trans.com            require_signed  mg.securedata-trans.com;
 secure.fraudarmorservice.com    require_signed  secure.fraudarmorservice.com;
 secure.norton.com               require_signed  secure.norton.com;
-secureserver.net                require_signed  em.secureserver.net;
+secureserver.net                require_signed  "em.secureserver.net;ptr:tipalti.com";  // unsigned mail via tipalti
 security.co.uk                  require_signed  security.co.uk;                 // unsigned mail should pass spf -all
 selectmedical.com               require_signed  selectmedical.com;
-sellerlabs.com                  require_signed  "sellerlabs.com,*.acemsrvb.com";
+seller.etsy.com                 require_signed  seller.etsy.com;                // exception to sendgrid blacklist
+sellerlabs.com                  require_signed  "sellerlabs.com,*.acemsrvb.com,*.acemsd3.com,*.acemsd4.com,*.acemsd5.com";
 send.grammarly.com              require_signed  send.grammarly.com;
 sendtax.hrblock.com             require_signed  sendtax.hrblock.com;
 sennheiser.com                  require_signed  sennheiseroffice365.onmicrosoft.com;
 sensorcon.com                   require_signed  sensorcon-com.20150623.gappssmtp.com;
 service01.email-allstate.com    require_signed  service01.email-allstate.com;
 sft.alerted.org                 require_signed  sft.alerted.org;
 sg.booking.com                  require_signed  "booking.com,sg.booking.com";
 sgia.org                        require_signed  "sgia.org,*.hubspotemail.net";
 shadesoflight.com               require_signed  shadesoflight.com;
 shapingahealthylife.com         require_signed  weebly.com;
+shapiro.com                     require_signed  shapiro.com;
 shapiro.secureemailportal.com   require_signed  secureemailportal.com;
+share.iheartmedia.com           require_signed  share.iheartmedia.com;
+sharkninja.com                  require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 shenghuatec.com                 require_signed  "shenghuatec.com;ptr:qq.com";   // unsigned mail, whitelisted via qq
 shermanstravel.com              require_signed  shermanstravel.com;
 shipstation.com                 require_signed  shipstation.com;
 shipsticks.com                  require_signed  shipsticks.com;
 shop.adorama.com                require_signed  shop.adorama.com;
 shopassociation.org             require_signed  bluehornet.com;
 shopbecker.com                  require_signed  "shopbecker.ccsend.com,amazonses.com";
 shop.c21stores.com              require_signed  shop.c21stores.com;
 shopcandelabra.com              require_signed  shopcandelabra.ccsend.com;
 shopdeluxe.com                  require_signed  deluxe.onmicrosoft.com;
+shophelp.org                    require_signed  sendgrid.net;                   // exception to sendgrid blacklist
 shopify.com                     require_signed  "shopify.com,zendesk.com,*.hubspot.com,mktdns.com";
+shop.josbank.com                require_signed  shop.josbank.com;
 shop.newbalance.com             require_signed  shop.newbalance.com;
 shoppermarketing.ims-stats.com  require_signed  shoppermarketing.ims-stats.com;
 shopping.hammacher.com          require_signed  "shopping.hammacher.com,email.triggermail.io";
 shopping.ibemail.com            require_signed  shopping.ibemail.com;
 shoprunner.com                  signed_white    shoprunner.com;                 // some unsigned mail via salesforce
 siegelagency.com                require_signed  "siegelagency.ccsend.com,pptsend03.com";
 siftly.com                      require_signed  siftly.com;
 signaturehardware.com           require_signed  signaturehardware.com;
 signnow.com                     require_signed  signnow.com;
 signprosystems.com              require_signed  orbus.ccsend.com;
+signupforebill.com              require_signed  signupforebill.com;
+signzoneinc.com                 require_signed  "signzoneinc.com,signzoneinc.onmicrosoft.com;ptr:mimecast.com ptr:iphmx.com";
 silentmessages.com              require_signed  icontactmail1.com;
+silversneakers.com              require_signed  silversneakers.com;
 simon.com                       require_signed  simon.com;
+simprosys.com                   require_signed  "simprosys.com,simprosys-com.20150623.gappssmtp.com";
 sircon.com                      require_signed  vertafore.onmicrosoft.com;
 siriusxm.com                    require_signed  siriusradio.onmicrosoft.com;
+siteimpact.com                  require_signed  "siteimpact.onmicrosoft.com,auth.ccsend.com";
 sixtyfourmusic.com              require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 sjbde.org                       require_signed  sjbde-org.20150623.gappssmtp.com;
 s.jcpenney.com                  require_signed  s.jcpenney.com;
 sjf.com                         require_signed  sjf.ccsend.com;
 skechers-alerts.com             require_signed  skechers-alerts.com;
 skechers.com                    require_signed  bluehornet.com;
 skillshare.com                  require_signed  skillshare.com;
 skillsurvey.com                 require_signed  skillsurvey.com;
 skuvault.com                    require_signed  skuvault.com;
+skyviewsat.com                  require_signed  skyviewsat.onmicrosoft.com;
 slack.com                       require_signed  slack.com;
 slinfo.pptsend02.com            require_signed  slinfo.pptsend02.com;
 slnews.pptsend02.com            require_signed  slnews.pptsend02.com;
 s.logmein.com                   require_signed  s.logmein.com;
 smartpros.com                   require_signed  smartpros.com;
 snooth.com                      require_signed  mg.snoothmail.com;
 snpictures.com                  require_signed  snpictures-com.20150623.gappssmtp.com;
 socialsecurityworks.org         require_signed  sg.actionnetwork.org;
 societyforscience-email.com     require_signed  societyforscience-email.com;
 socksaddict.com                 require_signed  bronto.com;
+sogtlaw.com                     require_signed  "sogtlaw.com,auth.ccsend.com";  // unsigned mail passes strong spf
 soldierfield.net                require_signed  icontactmail2.com;
+solvang-conservatory.org        require_signed  solvang-conservatory.org;
 sony.com                        signed_white    sony.onmicrosoft.com;           // some unsigned mail via lightpath
+sophiainstitute.com             require_signed  "sophiainstitute.com,mailchimpapp.net";
 sos.ca.gov                      require_signed  "californiagold.onmicrosoft.com,auth.ccsend.com";
 soul-cycle.com                  require_signed  e2ma.net;
 soundcloud.com                  require_signed  soundcloud.com;
 sourcelink.com                  require_signed  sourcelink.com;
 sourceone.nazdar.com            require_signed  reachmail.net;
 sova.com                        require_signed  sova.ccsend.com;
 sovos.com                       signed_white    sovos.com;                      // some unsigned mail via ms outlook
+spaces.hightailmail.com         require_signed  yousendit.com;
 specialolympics.org             signed_white    bounce.bluestatedigital.com;
 specialty-freight.com           require_signed  specialty-freight.com;
+spe.sony.com                    require_signed  sony.onmicrosoft.com;
 spglobal.com                    require_signed  spglobal.com;
 spiceworks.com                  require_signed  spiceworks.com;
 spie.org                        require_signed  spieorg.onmicrosoft.com;
 splitly.com                     require_signed  splitly.com;
 sportscardigest.com             require_signed  aweber.com;
 springboardmedia.com            require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 springer.com                    require_signed  springer.com;
 springeronline.com              require_signed  springeronline.com;
 sprint.delivery.net             require_signed  sprint.delivery.net;
 squarespace.com                 require_signed  squarespace.com;
+squarespace.info                require_signed  squarespace.info;
 squaretrade.com                 require_signed  squaretrade.com;
 ssa.gov                         require_signed  ssa.gov;
 ssmhealth.com                   require_signed  ssmhealth.onmicrosoft.com;
 st94.com                        signed_white    st94.ccsend.com;
 stackforpa.com                  require_signed  bounce.bluestatedigital.com;
 stanford.edu                    require_signed  "stanford.edu,office365stanford.onmicrosoft.com";
 stanfordhealthcare.org          signed_white    sbshare1.wc08.net;              // might have some other signers
 staplesadvantage.com            require_signed  "staplesadvantage.com,yotpo.com";
 staples.com                     signed_white    "ussicorp5.onmicrosoft.com,mktroute.com";   // some unsigned mail via salesforce
 statefarminfo.com               require_signed  statefarminfo.com;
-state.gov                       require_signed  state.gov;
+state.gov                       require_signed  "state.gov,mailchimpapp.net";
 state.mn.us                     require_signed  mn365.onmicrosoft.com;
 statnews.com                    require_signed  "statnews.com,statnews-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+statuspage.io                   require_signed  sendgrid.net;
 steeleassetmanagement.net       require_signed  gmail.com;
-steelforge.com                  require_signed  b2b-mail.net;
+steelforge.com                  require_signed  "steelforge.com,b2b-mail.net";
 sterlinglimoservice.com         require_signed  "aro365516309.onmicrosoft.com,limoemailmarketing.com";
 stjstr.org                      require_signed  "stjstr-org.20150623.gappssmtp.com,mystudentsprogress.com";
 stonybrook-u.org                require_signed  stonybrook-u.org;
 store.aabacosmallbusiness.com   require_signed  yahoo.com;
 stores.lordandtaylor.com        require_signed  stores.lordandtaylor.com;
 store.yahoo.com                 require_signed  yahoo.com;
+streamyard.com                  require_signed  "streamyard.com,dripemail2.com";
 stringacademyofwisconsin.org    require_signed  panthers.onmicrosoft.com;
 stripe.com                      require_signed  stripe.com;
 strongmail.cfmvmail.com         require_signed  strongmail.cfmvmail.com;
 studiomalibu.com                require_signed  studiomalibu-com.20150623.gappssmtp.com;
 style.adoreme.com               require_signed  style.adoreme.com;
 suggestedjobs.com               require_signed  suggestedjobs.com;
 sundance.org                    require_signed  sundance.org;
 suntrust.com                    require_signed  suntrust.com;
 superbrightleds.com             require_signed  "superbrightleds.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 superflypresents.com            signed_white    superflypresents.com;           // also from mailchimp, not listed in their spf record
-superior-phs.com                require_signed  superior-phs.ccsend.com;
+superior-phs.com                require_signed  "superior-phs.com,superior-phs.ccsend.com;ptr:shspma.com";
 supermoon.com                   require_signed  supermoonla.onmicrosoft.com;
 support.com                     signed_black    sendgrid.net;                   // apple support scam
 support.facebook.com            require_signed  support.facebook.com;
 support.org                     signed_black    sendgrid.net;                   // apple support scam
 support.yellowstone.org         require_signed  support.yellowstone.org;
 support.zappos.com              require_signed  zappos.com;
 surgeconsultantgroup.com        require_signed  surgeconsultantgroup-com.20150623.gappssmtp.com;
+s.usa.experian.com              require_signed  s.usa.experian.com;
 susquis.com                     require_signed  spsend.com;
 sustainablebrands.com           require_signed  sustainablebrands.com;
 svemail.evesaddiction.com       require_signed  svemail.evesaddiction.com;
 svemail.fromyouflowers.com      require_signed  svemail.fromyouflowers.com;
 svemail.sendflowers.com         require_signed  svemail.sendflowers.com;
 synergysettlements.com          require_signed  "synergysettlementconsulting.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 syvchorale.org                  require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 tabshred.com                    require_signed  tabshred.com;
 talend.com                      require_signed  talend.com;
 talentsmartnewsletter.com       require_signed  email.talentsmartnewsletter.com;
+talkmatch.com                   require_signed  talkmatch.com;
 target-reporting.net            require_signed  email.broadcastsavings.com;     // dsgcreative
 tasc.tasconline.com             require_signed  lh1ondemand.com;
 tasmarketing.com                require_signed  tasmarketing.ccsend.com;
 tastingtable.com                require_signed  tastingtable.com;
 taxesinretirement567.com        require_signed  taxesinretirement567.com;
 taxformprinter.com              require_signed  taxformprinter.com;
 taxpracticepro.com              require_signed  taxpracticepro.com;
 taxprofessionalsresource.net    require_signed  taxprofessionalsresource.net;
+tcncountry.com                  require_signed  tcncountry-com.20150623.gappssmtp.com;
 team2.targetmarketingmag.com    require_signed  team2.targetmarketingmag.com;
 teamgantt.com                   require_signed  notifications.teamgantt.com;
 teamwork.com                    require_signed  teamwork.com;
 team.wrike.com                  require_signed  "wrike.com,mktomail.com";
 teapartybulletin.com            require_signed  teapartybulletin.com;
 teapartypolitics.com            require_signed  teapartypolitics.com;
 teapartypoliticsnews.com        require_signed  teapartypoliticsnews.com;
 techforless-alerts.com          require_signed  techforless-alerts.com;
 t.e.freepeople.com              require_signed  t.e.freepeople.com;
+tegna.com                       require_signed  tegna.onmicrosoft.com;
 telescopecasual.com             require_signed  telescope.onmicrosoft.com;
+tenanthandbooks.com             require_signed  tenanthandbooks.com;
 tennettmfg.com                  require_signed  tennettmfg.com;
 tenthousandvillages.com         require_signed  tenthousandvillages.com;
 terravidahc.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 terumomedical.com               require_signed  terumoamericas.onmicrosoft.com;
 test.com                        require_signed  test.com;                       // typically forged
 theatrephiladelphia.org         require_signed  theatrephiladelphia.ccsend.com;
 thechivery.com                  require_signed  thechivery.com;
 the-citizenry.com               require_signed  "the-citizenry.com,shopify.com,delivery.klaviyomail.com";
 thedailygrind.news              require_signed  thedailygrind.news;
 the-efa.org                     require_signed  "the-efa.org,the-efa.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+thefarmersdog.com               require_signed  thefarmersdog.com;
+thefightmag.com                 require_signed  "thefightmag.com;ptr:lunarbreeze.com";  // unsigned mail passes altered spf
 thefisherman.com                require_signed  thefisherman.ccsend.com;
+thegeneral.com                  require_signed  "amfam.onmicrosoft.com;ptr:mimecast.com";
 thegovconadvisors.com           require_signed  reachmail.net;
 thegramlist.com                 require_signed  "thegramlist-com.20150623.gappssmtp.com,sendgrid.me,mailchimpapp.net";
 thehotviolinist.com             require_signed  "ck.thehotviolinist.com,ckmail4.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 thejurylab.com                  require_signed  icontactmail1.com;
 thelooploft.com                 require_signed  thelooploft.com;
 themagnetgroup.com              require_signed  themagnetgroup.com;
+themany.com                     require_signed  themany-com.20150623.gappssmtp.c
 themichigancatholicchoir.org    require_signed  papadantravel.com;
 theneed2know.com                signed_white    theneed2know.com;               // signing key dropped from dns, clever
 thenobleflame.com               require_signed  thenobleflame.com;
 theproducenews.com              require_signed  theproducenews.ccsend.com;
 therdstore.com                  require_signed  jetrord.ccsend.com;
 therealdeal.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 theselfimprovementgenie.com     require_signed  theselfimprovementgenie.com;
 theshadestore.com               require_signed  theshadestore.com;
 thesoccerwire.com               require_signed  hummersport.ccsend.com;
 thesymphony.org                 require_signed  thesymphony.org;
+thetollroads.com                require_signed  thetollroads.com;
 thetrustadvisor.com             require_signed  thetrustadvisor.com;
 theupsstore.com                 require_signed  "theupsstore.com,tupssfran.onmicrosoft.com,mailgun.signpost.com";
 thewarmingstore.com             require_signed  icontactmail1.com;
 thingiverse.com                 require_signed  thingiverse.com;
 thingtobring.com                require_signed  sendgrid.me;
 thriftbooks-email.com           require_signed  thriftbooks-email.com;
 thriveglobal.com                require_signed  "thriveglobal.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 thrivemarket.com                require_signed  thrivemarket.com;
 ticketfly.com                   require_signed  ticketfly.com;
 ticketleap.com                  require_signed  "ticketleap.com,amazonses.com";
-ticketmaster.com                require_signed  ticketmaster.com;
+ticketmaster.com                require_signed  "ticketmaster.com,sendgrid.net";
 tickets.rugbyworldcup.com       require_signed  tickets.rugbyworldcup.com;
 tidio.net                       require_signed  "tidio.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 tieivote.com                    require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 timeout.com                     require_signed  timeout-com.20150623.gappssmtp.com;
+timetrade.com                   require_signed  "timetrade.com,signer sendgrid.net";
+tinuiti.com                     require_signed  "tinuiti.com;ptr:intacct.com";
 tiogahvac.com                   require_signed  tiogahvac.onmicrosoft.com;
 titanemail.com                  require_signed  "titanemail-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 t.kohls.com                     require_signed  t.kohls.com;
 t.mail.coursera.org             require_signed  t.mail.coursera.org;
+tmediasales.com                 require_signed  kdoc.onmicrosoft.com;
 tm.vistaprint.com               require_signed  tm.vistaprint.com;
 tomarind.com                    require_signed  "netorgft1471273.onmicrosoft.com,tomarind.ccsend.com";
 tom.com                         require_signed  tom.com;                        // unsigned mail should pass spf -all
 tomudall.com                    signed_white    bounce.bluestatedigital.com;
 toolsource.com                  require_signed  yahoo.com;
 toomeyforsenate.com             require_signed  toomeyforsenate.com;
 toomey.senate.gov               require_signed  senate.gov;
-touchstonehomeproducts.com      signed_white    "yahoo.com,auth.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+touchstonehomeproducts.com      signed_white    "shopifyemail.com,yahoo.com,auth.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 tower90230.com                  require_signed  tower90230.onmicrosoft.com;
 townhallmail.com                require_signed  townhallmail.com;
 trade.gov                       require_signed  trade.gov;
 traillink.com                   require_signed  traillink.com;
 trainingmag.com                 require_signed  "*.n-email5.net,*.n-email.net"
+transactional.cnn.com           require_signed  transactional.cnn.com;
 transactisiq.com                require_signed  transactisiq.com;
 trans.duluthtradingemail.com    require_signed  trans.duluthtradingemail.com;
 transferwise.com                require_signed  transferwise.com;
+transparency-amazon.com         require_signed  transparency-amazon.com;
 traveloni.com                   require_signed  "traveloni.com,traveloni.ccsend.com";
 travel-services.americanexpress.com     require_signed  travel-services.americanexpress.com;
 travismanion.org                require_signed  "travismanion.org,omktmail2.com,icontactmail9.com";
 treasuryandtradesolutions.citi.com require_signed  treasuryandtradesolutions.citi.com;
 trekbikes.com                   require_signed  e.trekbikes.com;
 trello.com                      require_signed  trello.com;
 trendhunter.com                 require_signed  trendhunter.ccsend.com;
 trendmicro.com                  require_signed  trendmicro.com;
-trialguides.com                 require_signed  infusionmail.com;
+trialguides.com                 require_signed  "infusionmail.com,mktomail.com,*.klaviyomail.com";
 tribalworldwide.com             require_signed  ddbnewyork.onmicrosoft.com;
 tridentadvisors.com             signed_white    tridentadvisors.onmicrosoft.com;// some mail has bad signature
 tridentmortgage.com             require_signed  tridentmortgage.com;
 trigentsolutions.com            require_signed  trigentsolutionsinc.onmicrosoft.com;
+tripadvisor.com                 require_signed  "tripadvisor.com,toutapp.com";
 tsdnotify.com                   require_signed  tsdnotify.com;                  // car leasing?
 t.snapfish.com                  require_signed  t.snapfish.com;
 t.spiritairlines.com            require_signed  t.spiritairlines.com;
 ttmail.timetrade.com            require_signed  timetrade.com;
 tuhs.temple.edu                 require_signed  tuhs.onmicrosoft.com;
 turner.com                      require_signed  turner.com;
 turnoutpac.org                  signed_white    bounce.bluestatedigital.com;
 tut.com                         require_signed  tut.ccsend.com;
+tvone.tv                        require_signed  urbanone.onmicrosoft.com;
+tvsquared.com                   require_signed  tvsquared.com;
+twdc.com                        require_signed  disneyonline.com;
 t.wilsonsleather.com            require_signed  t.wilsonsleather.com;
 twitter.com                     require_signed  twitter.com;
 tx.gov                          require_signed  tx.gov                          // block forged spam mail
 tx.redbox.com                   require_signed  tx.redbox.com;
 tycoint.com                     require_signed  "tycoint.com,tycointernational.onmicrosoft.com";
 ultimateestateplanner.com       require_signed  ultimateestateplanner.ccsend.com;
 umail.ucsb.edu                  require_signed  "ltsc.ucsb.edu,gmail.com";      // google groups mail for michael signed by gmail
 umich.edu                       signed_white    lyris.dundee.net;               // mailing list
 uncubed.com                     require_signed  uncubed.com;
 undertone.com                   signed_white    undertone.com;                  // mbmg client
+unifyfcu.com                    require_signed  unifyfcu.com;
 unionbank.com                   signed_white    unionbank.com;                  // some unsigned mail via cashedge
 unionhomemortgage.com           require_signed  eeoo.co;
 unionleague.org                 require_signed  "unionleague.org,unionleague.ccsend.com;a:dispatch-us.ppe-hosted.com";
 uniquephoto.com                 require_signed  uniquephoto.com;
 united.com                      require_signed  united.com;                     // unsigned but passes spf
 unitedyacht.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 unitronics.com                  require_signed  unitronics.ccsend.com;
 universalsocceracademy.com      require_signed  universalsocceracademy.ccsend.com;
 universityproducts.com          signed_white    icontactmail3.com;              // unsigned mail from their own servers, no spf txt record
 univision.net                   require_signed  uci.onmicrosoft.com;
+uniworld.com                    require_signed  travcorp.onmicrosoft.com;
 unm.edu                         require_signed  unmm.onmicrosoft.com;
 unyson.com                      require_signed  unyson.com;
 uofpittgreensburg.org           require_signed  uofpittgreensburg.org;
 update.santanderbank.com        require_signed  update.santanderbank.com;
 updates.conservativeintel.com   require_signed  updates.conservativeintel.com;
 updates.hayneedle.com           require_signed  updates.hayneedle.com;
 updates.sba.gov                 require_signed  updates.sba.gov;                // unsigned mail should pass spf -all
+updates.sperrytopsider.com      require_signed  updates.sperrytopsider.com;
 updates.ticketnetworkdirect.com require_signed  updates.ticketnetworkdirect.com;
 updates.uscourts.gov            require_signed  updates.uscourts.gov;
 update.trulia.com               require_signed  update.trulia.com;
-uphs.upenn.edu                  require_signed  "cvent-planner.com;ptr:uphs.upenn.edu";
+upenn.edu                       signed_white    penno365.onmicrosoft.com;
+uphs.upenn.edu                  require_signed  "cvent-planner.com;ptr:uphs.upenn.edu ptr:peopleclick.com";
 uportland.org                   require_signed  uportland.org;
 uprinting.com                   require_signed  uprinting.com;
 ups.com                         require_signed  ups.com;
 upsemail.com                    require_signed  upsemail.com;                   // actually is ups
 upsfreight.com                  require_signed  upsfreight.com;
 upsilonventures.com             require_signed  upsilonllc.onmicrosoft.com;
 upwork.com                      require_signed  mg.upwork.com;
+ureach-usa.com                  require_signed  ureach-usa-com.20150623.gappssmtp.com;
 urthave.com                     require_signed  urthave.com;
 usa.constitutionalrightspac.com require_signed  usa.constitutionalrightspac.com;
 usbank.com                      require_signed  usbank.com;
+usc.edu                         signed_white    sendgrid.net;                   // exception to sendgrid blacklist
+usciences.edu                   require_signed  usciences.onmicrosoft.com;
 usgamail.org                    require_signed  usgamail.org;
 usnews-b2b.com                  require_signed  usnews-b2b.com;
 usnotaries.com                  require_signed  usnotaries.ccsend.com;
 us.panasonic.com                signed_white    "us.panasonic.com,pcus1.onmicrosoft.com";   // some broken signatures from microsoft
 usrigging.com                   require_signed  usrigging.onmicrosoft.com;
 value.amerimark.com             require_signed  value.amerimark.com;
 value.kmart.com                 require_signed  value.kmart.com;
 value.sears.com                 require_signed  value.sears.com;
 vanguardcharitable.org          require_signed  cvent-planner.com;
 variety.com                     require_signed  variety-com.20150623.gappssmtp.com;
+vdx.tv                          require_signed  exponentialinc.onmicrosoft.com; // mbmg client
 vehiclemerchandising.com        require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 venmo.com                       require_signed  venmo.com;
 verifone.com                    require_signed  "verifone.com,verifone365.onmicrosoft.com";
 veritivcorp.com                 signed_white    veritivcorp.onmicrosoft.com;    // unsigned via apexanalytix.com that fails spf
 verizon.com                     require_signed  verizon.com;
 verizonenterprise.com           require_signed  verizonenterprise.com;
+verizon.net                     require_signed  verizon.net;
 verizonwireless.com             require_signed  verizonwireless.com;
+viantinc.com                    require_signed  viantinc.com;
 vice.com                        require_signed  vice.com;
 viewpoint.com                   require_signed  "viewpoint.com,coaxis.onmicrosoft.com,cvent-planner.com";
 vignetteslearning.com           require_signed  simplifiedelearning.ccsend.com;
 vip.conservativeintel.com       require_signed  vip.conservativeintel.com;
 virtualeventbags.com            require_signed  email.virtualeventbags.com;
 visitpartnerhub.com             require_signed  visitpartnerhub.com;
 visitwynn.com                   require_signed  visitwynn.com;
 visstun-digispec.com            signed_white    "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";    // some unsigned mail via dspads.com fails strong spf
 vistana.com                     require_signed  "iilg.onmicrosoft.com,sendgrid.net";        // some unsigned mail passes strong spf
+vista.today                     require_signed  vista.today;
 vitalnetix.com                  require_signed  vitalnetix.onmicrosoft.com;
 vitaminmom.com                  require_signed  vitaminmom-com.20150623.gappssmtp.com;
 vivial.net                      require_signed  "vivial.net,email.nearsay.com";
 vlmservice.com                  signed_white    smtpserver.email;               // some unsigned mail via exacttarget
 vlmservice.zendesk.com          require_signed  "zendesk.com,*.zendesk.com"
 wanjugo.com                     require_signed  wanjugo.com;
 warnerbros.com                  require_signed  warnerbros.com;
 warriorcustomgolf.com           require_signed  warriorcustomgolf.com;
 washingtonpost.com              require_signed  washingtonpost.com;
 washjeff-info.org               require_signed  washjeff-info.org;
-washpost.com                    require_signed  washpost.onmicrosoft.com;
+washpost.com                    require_signed  washpost.com;
 washtimesnews.com               require_signed  washtimesnews.com;
 watchdog.net                    require_signed  sg.actionnetwork.org;
 watchmanmonitoring.com          require_signed  watchmanmonitoring.com;
 waterboards.ca.gov              require_signed  cawaterboards.onmicrosoft.com;
-wayfair.com                     require_signed  "wayfair.com,wayfair.onmicrosoft.com";
+wayfair.com                     require_signed  "wayfair.com,wayfair.onmicrosoft.com;ptr:wayfair.com";  // some unsigned mail fails their own spf -all
 wayneart.org                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 wcasd.k12.pa.us                 require_signed  wcasd.k12.pa.us;
 wdsearch.com                    require_signed  wdsearch.com;
 wdw.disneyonline.com            require_signed  disneyonline.com;
 wealthyretirement.com           require_signed  wealthyretirement.com;
 wearecollide.com                require_signed  "wearecollide-com.20150623.gappssmtp.com,mlsend3.com";
 weareultraviolet.org            require_signed  "weareultraviolet.org,list.weareultraviolet.org";
 weather.com                     require_signed  weather.com;
 webcargo.net                    require_signed  webcargo.net;
 webervations.com                require_signed  webervations.com;
+webmd.net                       require_signed  webmd.net;
 webopenings.com                 require_signed  webopenings.com;
+web.penzeys.com                 require_signed  sendgrid.net;
 webstaurantstore.com            require_signed  webstaurantstore.com;
 weekly-bulletin.com             require_signed  weekly-bulletin.com;
 weilercorpemail.com             require_signed  weilercorpemail.com;
 weinsteinconstruction.com       require_signed  weinsteinconstruction.com;
 welcome.aexp.com                require_signed  welcome.aexp.com;
+welcomeamerica.com              require_signed  welcomeamerica-com.20150623.gappssmtp.com;
 wellsfargo.com                  require_signed  wellsfargo.com;
 wellsfargorewards.com           require_signed  wellsfargorewards.com;
 wellspouse.org                  require_signed  wellspouse.org;
 wesendit.com                    require_signed  wesendit.com;
 westgermanbmw.com               signed_white    "westgermanbmw.com,xtime.com";  // some unsigned mail via media-mastermind
 westinvacations.com             require_signed  iilg.onmicrosoft.com;
 westrock.com                    signed_white    westrockco.onmicrosoft.com;     // some unsigned mail via outlook
 weta.org                        require_signed  server8839.e-activist.com;
 wetransfer.com                  require_signed  wetransfer.com;
-wharton.upenn.edu               require_signed  "wharton.upenn.edu,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+wharton.upenn.edu               signed_white    "wharton.upenn.edu,penno365.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 whcandy.com                     require_signed  whcandy.com;
 whitegraphics.com               require_signed  whitegraphics-com.20150623.gappssmtp.com;
 whitesharkmedia.com             require_signed  whitesharkmedia.com;
+whitetaildisposal.com           signed_white    sendgrid.net;                   // exception to sendgrid blacklist
 wholesaleprime.com              require_signed  "sendgrid.net,frg.im";
 wiley.com                       require_signed  wiley.com;
 williampenninn.com              require_signed  williampenninn.ccsend.com;
+williamsonandbrown.com          require_signed  "williamsonandbrown.com;ptr:daemonmail.net";    // unsigned mail, no spf record
 windstream.net                  require_signed  caaonline.ccsend.com;
 wineawesomeness.com             require_signed  wineawesomeness.com;
 wingsmagazine.com               require_signed  wingsmagazine.com;
 winmo.com                       signed_white    "winmo.com,winmo-com.20150623.gappssmtp.com";   // missing winmo.com key in dns
 winzip.com                      require_signed  winzip.com;
 wmtsub.com                      require_signed  wmtsub.com;
 wolfbrown.com                   require_signed  wolfbrown.ccsend.com;
 wolfermans-email.com            require_signed  wolfermans-email.com;
 wolfforpa.com                   signed_white    bounce.bluestatedigital.com;
 wolfgordon.com                  require_signed  "wolfgordon.com,b2b-mail.net";
+wolterskluwer.com               require_signed  wolterskluwer.com;
 womenshealthydiets.com          require_signed  womenshealthydiets.com;
+wonderful.com                   require_signed  wonderful.com;
 woodturner.org                  signed_white    aawwoodturner.ccsend.com;       // some unsigned mail via g2host.com
 woodworkingshop.com             require_signed  emailwoodworkingshop.com;
 woof.barkshop.com               require_signed  woof.barkshop.com;
 woof.chewy.com                  require_signed  woof.chewy.com;
 woolrich.com                    require_signed  woolrich.com;
 worldmediaonline.com            require_signed  "worldmediaonline.onmicrosoft.com,auth.ccsend.com";
 worldsciencefestival.com        require_signed  worldsciencefestival.com;
 wrigley.com                     require_signed  "wrigley.com,e2ma.net";
 wsdisplay.com                   require_signed  wsdisplay-com.20150623.gappssmtp.com;
 wsfsbank.com                    require_signed  "wsfsbank.com;ptr:bankserv.com";
-wsj.com                         require_signed  "wsj.com,wsj-com.20150623.gappssmtp.com;ptr:iphmx.com";
+wsjbarrons.com                  require_signed  wsjbarrons-com.20150623.gappssmtp.com;
+wsj.com                         require_signed  "wsj.com,wsj-com.20150623.gappssmtp.com,cmail2.com;ptr:iphmx.com";
 wstelecomlaw.com                require_signed  sapronov.onmicrosoft.com;
+wtcde.com                       require_signed  "wtcde.ccsend.com,auth.ccsend.com";
 wtcphila.org                    require_signed  "wtcphila.onmicrosoft.com,wtcphila.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+wt-group.com                    require_signed  walchlitaubergroup.onmicrosoft.com;
 wullo.com                       require_signed  wullo.com;
 wunderman.com                   require_signed  yrb.onmicrosoft.com;
 wyattresearchnewsletters.com    require_signed  wyattresearchnewsletters.com;
 x2vol.com                       require_signed  sendgrid.info;
 xarisma.com                     signed_white    xarisma.com;                    // some unsigned mail via netsuite.com
 xode.com                        require_signed  xode.com;
 yahoo-inc.com                   require_signed  yahoo-inc.com;                  // password resets, etc
 yellowstone.org                 require_signed  mta-bbcspool.convio.net;
 yelp.com                        require_signed  yelp.com;
 yipit.com                       require_signed  yipit.com;
+ymcala.org                      require_signed  ymcala.onmicrosoft.com;
 ymca-snoco.org                  require_signed  ymcasnoco.onmicrosoft.com;
 y.mileskimball.com              require_signed  y.mileskimball.com;
 youcaring.com                   require_signed  youcaring.com;
 youmake.wetransfer.com          require_signed  youmake.wetransfer.com;
 youngliving.com                 require_signed  youngliving.com;
 youniqueproducts.com            require_signed  youniqueproducts.com;
 youraccount.readyrefresh.com    require_signed  youraccount.readyrefresh.com;
 yourdcdchocolatier.com          require_signed  yourdcdchocolatier.com;
 yourmembership.com              signed_white    yourmembership.com;             // some unsigned mail from their own servers
+your.offers.dominos.com         require_signed  your.offers.dominos.com;
 yourpotlaw.com                  require_signed  yourpotlaw.com;
-yourstorewizards.com            signed_white    "yourstorewizards.com,yahoo.com,freshdesk.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";   // some unsigned mail via usaepay.com
+your.riteaid.com                require_signed  your.riteaid.com;
+yourstorewizards.com            signed_white    "yourstorewizards.com,yahoo.com,freshdesk.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net,sendgrid.net";   // some unsigned mail via usaepay.com
 youthelitesports.org            require_signed  youthelitesports-org.20150623.gappssmtp.com;
 youtube.com                     require_signed  youtube.com;
 yuhsbstudents.org               require_signed  yuhsbstudents-org.20150623.gappssmtp.com;
 yummielife.com                  require_signed  yummielife.com;
-zambezi-la.com                  require_signed  zambezi-la-com.20150623.gappssmtp.com;
+zambezi-la.com                  signed_white    "google.com,zambezi-la-com.20150623.gappssmtp.com";
 zapier.com                      require_signed  zapier.com;
 zappos.com                      require_signed  zappos.com;
 zenfoliomail.com                require_signed  zenfoliomail.com;
 ziprecruiter.com                require_signed  "ziprecruiter.com,sendgrid.me,sendgrid.ziprecruiter.com";
 zixmessagecenter.com            require_signed  zixmessagecenter.com;
 zoomcake.com                    require_signed  zoomcake.com;
 zoom.us                         require_signed  "zoom.us,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 zooprinting.com                 require_signed  eoncode.com;
 zorpia.com                      require_signed  zorpia.com;
 zortrax.com                     require_signed  "zortrax.com,emlgrid.com";
+zycus.com                       require_signed  zycus.com;                      // unsigned mail passes strong spf
 zywave.com                      require_signed  zywave.com;

Mercurial > dnsbl

comparison dnsbl.dkim.conf @ 467:f5b394bec28c