dnsbl: dnsbl.dkim.conf comparison

comparison dnsbl.dkim.conf @ 462:f3f1ece619ba stable-6-0-75

change dkim_from syntax to allow "signer1,signer2;spf data"

author	Carl Byington <carl@five-ten-sg.com>
date	Sat, 09 Mar 2019 18:46:25 -0800
parents	d4275f26241c
children	428de28b34b7

comparison

equal deleted inserted replaced

-:c22fc705c597
+:f3f1ece619ba
+1039rxp.com                     require_signed  1039rxp-com.20150623.gappssmtp.com;
+10news.com                      require_signed  ewscripps.onmicrosoft.com;
 123g.info                       require_signed  123g.info;
 123greetings.biz                require_signed  123greetings.biz;
 123greetings.info               require_signed  123greetings.info;
 123rf.com                       require_signed  "123rf.com,123rf-com.20150623.gappssmtp.com";
 160over90.com                   require_signed  160over90.onmicrosoft.com;
 24petwatch.com                  require_signed  24petwatch.com;
 2600hz.com                      require_signed  2600hz.com;
 314action.com                   signed_white    bounce.bluestatedigital.com;
 314action.org                   signed_white    bounce.bluestatedigital.com;
 4imprint.com                    require_signed  4imprint.com;
-4over.com                       require_signed  carrier.4over.com;
+4over4.com                      require_signed  4over4.ccsend.com;
+4over.com                       signed_white    "carrier.4over.com,4over-com.20150623.gappssmtp.com";   // some unsigned mail
 7milesglobal.com                require_signed  7milesglobal-com.20150623.gappssmtp.com;
 8x8.com                         require_signed  8x8.com;
 a1.hilton.com                   require_signed  a1.hilton.com;
 a4m.org                         require_signed  sendgrid.info;
-aaabrasives.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+aaabrasives.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 aaas.sciencepubs.org            require_signed  aaas.sciencepubs.org;
 aa.com                          require_signed  amrcorp.onmicrosoft.com;
 aadvantage.email.aa.com         require_signed  aadvantage.email.aa.com;
-aaepa.com                       require_signed  americanacademytraining.com;
+aaepa.com                       require_signed  "aaepa.onmicrosoft.com,americanacademytraining.com";
+aaj.bulletinmedia.com           require_signed  bulletinmedia.com;
+aaj.custombriefings.com         require_signed  custombriefings.com;
 aapromo.email.aa.com            require_signed  aapromo.email.aa.com;
 aavacations.email.aa.com        require_signed  aavacations.email.aa.com;
 abbeypress.com                  require_signed  abbeypress.com;
+abc.com                         require_signed  twdc.onmicrosoft.com;
 abcomrents.com                  require_signed  abcomrents.com;
 abingtonaesthetic.com           require_signed  "yahoo.com,em.secureserver.net";
+abms.org                        require_signed  abmsref.onmicrosoft.com;
 abqchamber.com                  require_signed  icontactmail4.com;
 abt.com                         require_signed  abt-com.20150623.gappssmtp.com;
+abusheroriginal.com             require_signed  netorgft2197093.onmicrosoft.com;
 academia-mail.com               require_signed  academia-mail.com;
+access-investments.com          require_signed  access-investments.com;
 acclivitysoftware.com           require_signed  acclivitysoftware.com;
+account.blinkist.com            require_signed  account.blinkist.com;
 accountemps.com                 require_signed  roberthalf.onmicrosoft.com;
 account.kmart.com               require_signed  account.kmart.com;
 accountmanageremail.com         require_signed  accountmanageremail.com;
 account-nvidia.com              require_signed  account-nvidia.com;
 account.pinterest.com           require_signed  account.pinterest.com;
 accountprotection.microsoft.com require_signed  accountprotection.microsoft.com;
 account.sears.com               require_signed  account.sears.com;
 accounts.google.com             require_signed  "google.com,accounts.google.com";
 accounts.paperlesspost.com      require_signed  "paperlesspost.com,*.paperlesspost.com";
 accuspeechmobile.com            require_signed  netorg112606.onmicrosoft.com;
-accutechdata.com                require_signed  accutechdatasupplies.onmicrosoft.com;
+accutechdata.com                require_signed  "accutechdata.com,accutechdatasupplies.onmicrosoft.com";
 acgov.org                       require_signed  acgov-org.20150623.gappssmtp.com;
 aclu.org                        require_signed  "aclu.org,email.aclu.org";
 aclupa.org                      require_signed  aclupa.org;
 acmeticketing.com               require_signed  acmeticketing.com;
 acronis.com                     require_signed  acronis.com;
 ac.travelocity.com              require_signed  ac.travelocity.com;
 actuarial-advancement.com       require_signed  actuarial-advancement-com.20150623.gappssmtp.com;
 acuityscheduling.com            require_signed  email.acuityscheduling.com;
 adcommgrp.com                   require_signed  adcommgrp-com.20150623.gappssmtp.com;
 adexchanger.com                 require_signed  adexchanger.com;
+adglow.com                      require_signed  adglow.com;
 adidasus-news.adidas.com        require_signed  adidasus-news.adidas.com;
+adlarge.com                     require_signed  adlarge.com;
 admarketing.yahoo.com           require_signed  admarketing.yahoo.com;
 adobe.com                       require_signed  "adobe.com,mktomail.com";
 adolescent.nyc                  require_signed  "cmail19.com,cmail20.com";
 adparlor.com                    require_signed  adparlor.com;
-adp.com                         require_signed  "adp.com,*.adp.com,rimagede.onmicrosoft.com";
+adp.com                         require_signed  "adp.com,*.adp.com";
 adrianacurcio.com               require_signed  emlr2.com;
 adroll.com                      require_signed  adroll.com;
 adroptions.com                  require_signed  adroptions.ccsend.com;
 adr.org                         require_signed  adr.org;
 adt.com                         require_signed  adtcom.onmicrosoft.com;
 advancement.villanova.edu       require_signed  advancement.villanova.edu;
 advantageescrow.net             require_signed  advantageescrow.net;
 adviserinvestments.com          require_signed  adviserinvestments.com;
 adv.strawberrynet.com           require_signed  adv.strawberrynet.com;
 a.email.hbr.org                 require_signed  a.email.hbr.org;
+aexp.com                        require_signed  aexp.com;
 afar.com                        require_signed  afar.com
 aflac-email.com                 require_signed  aflac-email.com;
 aflac-onlineservices.com        require_signed  aflac-onlineservices.com;
 afsc.org                        require_signed  afsc.org;
-afsp.org                        require_signed  "auth.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+afsp.org                        require_signed  "afsp.org,auth.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-againstallgrain.com             require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+againstallgrain.com             require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 agencyprotalent.com             require_signed  agencyprotalent.com;
 agent.thehartford.com           require_signed  agent.thehartford.com;
 agfa.com                        require_signed  www-agfa.ccsend.com;
 agingcare.com                   require_signed  agingcare.com;
-agoodson.com                    require_signed  "emlr2.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+agoodson.com                    require_signed  "emlr2.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 a.grubhub.com                   require_signed  a.grubhub.com;
 agu.org                         require_signed  agu.org;
 ahava.com                       require_signed  ahava.com;
+aiaa.bulletinmedia.com          require_signed  bulletinmedia.com;
 aiaa.org                        require_signed  aiaa.org;
 aiche.org                       require_signed  aiche.org;
-aiga.org                        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+aiga.org                        require_signed  "aiga.org,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+aig.com                         signed_white    aig.com;                        // some unsigned mail via messagelabs
+aim.com                         unsigned_black  "aim.com,mx.aim.com";
 airbnb.com                      require_signed  email.airbnb.com;
 airconway.com                   require_signed  airconway.ccsend.com;
 airstoc.com                     require_signed  airstoc.com;
 ajww.com                        require_signed  ajww-com.20150623.gappssmtp.com;
 akc.org                         require_signed  akc.org;
 akela-partners.com              require_signed  aweber.com
 alerts.aa.com                   require_signed  alerts.aa.com;
+alerts.ally.com                 require_signed  alerts.ally.com;
 alerts.aviatormastercard.com    require_signed  alerts.aviatormastercard.com;
 alerts.barclaycardus.com        require_signed  alerts.barclaycardus.com;
-alerts.comcast.net              signed_white    alerts.comcast.net;             // comcast forwarding breaks their own signatures
+alerts.comcast.net              signed_white    alerts.comcast.net;             // comcast internal forwarding breaks their own signatures
 alerts.offers.com               require_signed  "alerts.offers.com,email.offers.com";
 alertsp.chase.com               require_signed  alertsp.chase.com;
 alerts.santander.us             require_signed  alerts.santander.us;
 alerts.skype.com                require_signed  alerts.skype.com;
 alerts.trulia.com               require_signed  alerts.trulia.com;
+alerts.usbank.com               require_signed  alerts.usbank.com;
 alexandani.com                  require_signed  alexandani.com;
 alignable.com                   require_signed  "alignable.com,invites.alignable.com";
 allaboutjazz.com                require_signed  allaboutjazz.com;
 allianceforaction.com           signed_white    allianceforaction.ccsend.com    // some unsigned mail from their servers, no spf
 alliedmg.biz                    require_signed  alliedmg.biz;
 allinoneline.com                require_signed  allinoneline.ccsend.com;
-allstarbaseballacademy.com      require_signed  allstarbaseballacademy.ccsend.com;
+allstarbaseballacademy.com      require_signed  "allstarbaseballacademy-com.20150623.gappssmtp.com,allstarbaseballacademy.ccsend.com";
-allstarnutrition.us             signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+allstarnutrition.us             signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 allstate.com                    signed_white    allstate.com;                   // some unsigned mail via allstate-mail.com not listed in their spf record
 alm.com                         require_signed  "e.alm.com,experiture.com";
 almo.com                        require_signed  icontactmail1.com;
+alpha.gr                        require_signed  alpha.gr;                       // unsigned but passes spf -all
 alpineescrow.net                require_signed  alpineescrowarrowhead.onmicrosoft.com;
 alro.com                        require_signed  "alro.com,alrocorp.onmicrosoft.com";
 altigen.com                     require_signed  zcsend.net;
 altramotion.com                 require_signed  ptgnet4.onmicrosoft.com;
 alumniclass.com                 require_signed  alumniclass.com;
-alumniclubs.columbia.edu        require_signed  columbiabusiness.onmicrosoft.com;
+alumniclubs.columbia.edu        require_signed  "alumniclubs.columbia.edu,columbiabusiness.onmicrosoft.com";
 alumni.nd.edu                   require_signed  "nd.edu,imodules.com";
 alz.org                         require_signed  "alz-org.20150623.gappssmtp.com,mta-bbcspool.convio.net,auth.ccsend.com";
+amalosangeles.org               require_signed  amalosangeles.org;
 amazoncapital.com               require_signed  amazon.com;
 amazon.ca                       require_signed  amazon.ca;
 amazon.com                      require_signed  amazon.com;
 amazon.fr                       require_signed  amazon.fr;
 amazonsellerservices.com        require_signed  amazonsellerservices.com;
+amcnetworks.com                 require_signed  "amcnetworks.com,amcnetworks.onmicrosoft.com";
+amcp.bulletinhealthcare.com     require_signed  bulletinhealthcare.com;
 amcp.custombriefings.com        require_signed  custombriefings.com;
 amcustomercare.att-mail.com     require_signed  amcustomercare.att-mail.com;
 americangreetings.com           require_signed  americangreetings.com;
 americanhotel.com               require_signed  americanhotel.com;
-americansuspension.com          require_signed  "store.smtp.bigcommerce.net,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+americansuspension.com          require_signed  "store.smtp.bigcommerce.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 americaslibertypac.com          require_signed  bluehornet.com;
 ameritas.com                    require_signed  "*.memberemail.com";
 amleo.com                       require_signed  amleo.com;
-amrevmuseum.org                 require_signed  "amrevmuseum.onmicrosoft.com,americanrevolutioncenter.ccsend.com,mta-bbcspool.convio.net";
+amrevmuseum.org                 signed_white    "amrevmuseum.onmicrosoft.com,americanrevolutioncenter.ccsend.com,mta-bbcspool.convio.net";  // some unsigned mail via blackbaud
 ams-cc.com                      require_signed  ams-cc.com;
 am.sony.com                     signed_white    sony.onmicrosoft.com;           // some unsigned mail via lightpath
 a.narrativemagazine.com         require_signed  a.narrativemagazine.com;
 anatbanielmethod.com            require_signed  infusionmail.com;
 anchoragemuseum.org             require_signed  anchoragemuseumassoc.onmicrosoft.com;
 anh-usa.org                     require_signed  salsalabs.org;
 anpanama.com                    require_signed  anpanama.com;
 anthempropane.com               require_signed  anthempropane.com;
 anthemww.com                    require_signed  matw.onmicrosoft.com
+aol.com                         unsigned_black  "aol.com,mx.aol.com";
+aol.de                          unsigned_black  aol.de;
+aol.fr                          unsigned_black  aol.fr;
 apgrents.com                    require_signed  icontactmail6.com;
-aplaceformom.com                require_signed  aplaceformom.com;
+aplaceformom.com                require_signed  "aplaceformom.com,aplaceformom.onmicrosoft.com";
 app.bamboohr.com                require_signed  app.bamboohr.com;
 apple.com                       require_signed  apple.com;
 applemusic.com                  require_signed  applemusic.com;
 appliednet.com                  require_signed  "mktomail.com,mktroute.com";
 app.production.membersuite.com  require_signed  sendgrid.info;
-appsheet.com                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+appsheet.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 appulatemail.com                require_signed  appulatemail.com;
-aquafadas.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+aquafadas.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 archpaper.com                   signed_white    archpaper.ccsend.com;           // some unsigned mail via listrak
 armsanctuary.org                require_signed  mta-bbcspool.convio.net;
 arthurhall.com                  require_signed  arthurhallins.onmicrosoft.com;
 artisanalcheese.com             require_signed  artisanalcheese.ccsend.com;
 artisticimagery.com             require_signed  artisticimagery-com.20150623.gappssmtp.com;
 artmaterialsonline.com          require_signed  artmaterialsonline.com;
 artnet.com                      signed_white    artnet.com;                     // some unsigned mail via their own servers
 artrenewal.org                  signed_white    artrenewal.ccsend.com;          // some unsigned mail via their own servers with no spf record
+artstation.com                  require_signed  "artstation.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 artsusa.org                     require_signed  bounce.bluestatedigital.com;
 asana.com                       require_signed  asana.com;
 ascot.co.uk                     require_signed  ascot.co.uk;
 asianskygroup.com               require_signed  asianskygroup.com;
 asicentral.com                  require_signed  asicentral.com;
-asimplertime.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+asimplertime.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 asisignage.com                  require_signed  icontactmail4.com;
 askaspn.com                     require_signed  genius-network.com;
 associationvoice.com            require_signed  associationvoice.com;
 assuretyconsulting.com          signed_white    "assuretyconsulting.com,hubspot.com";   // some unsigned mail via salesforce, no spf record
 astc.org                        require_signed  icontactmail3.com;
 astrazeneca.com                 require_signed  azcollaboration.onmicrosoft.com;
 asurion.com                     require_signed  asurion.com;
 atautosbdc.com                  require_signed  sg01.motosnap.com;
 atdcd-media.com                 require_signed  atdcd-media.com;
 athero.org                      require_signed  "*.musvc.com";
+attn.com                        require_signed  attn.com;
 att.tm00.com                    require_signed  tm00.com;
+aubergeresorts.com              require_signed  aubergeresorts.com;
 audible.com                     require_signed  audible.com;
 audicommunication.com           require_signed  audicommunication.com;
 audiencerewards.com             require_signed  audiencerewards.com;
+audubon.org                     require_signed  audubon.org;
 autodeskcommunications.com      require_signed  autodeskcommunications.com;
-autonomous.ai                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+autonomous.ai                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 avalonflooring.com              signed_white    "nf157.n-email.net,nf156.n-email.net";  // some unsigned mail from their own servers
 avangate.com                    require_signed  avangate.com;
 avanteducation.com              require_signed  avanteducation.com;
 avvo.com                        signed_white    avvocom.onmicrosoft.com;        // some unsigned mail via salesforce
 azureemail.microsoft.com        require_signed  azureemail.microsoft.com;
 backupify.com                   require_signed  backupify.com;
 bacnyc.org                      require_signed  bacnyc.ccsend.com;
-baltimorecomiccon.com           require_signed  baltimorecomiccon.ccsend.com;
+baltimorecomiccon.com           require_signed  "baltimorecomiccon-com.20150623.gappssmtp.com,baltimorecomiccon.ccsend.com";
 bamboohr.com                    require_signed  bamboohr.com;
 bankofamerica.com               require_signed  bankofamerica.com;
 bankofinternet.com              require_signed  bankofinternet.com;
 barackobama.com                 require_signed  barackobama.com
 bartlettbearing.com             require_signed  "bartlettbearing.onmicrosoft.com,auth.ccsend.com";
 basspronews.com                 require_signed  basspronews.com;
 basusa.com                      signed_white    myenrollservices.onmicrosoft.com;   // some unsigned mail from their own servers with no spf record
+bayard-inc.com                  require_signed  "bayard.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 bbdo.com                        require_signed  bbdo.com;
 bbofpa.com                      require_signed  bbofpa.ccsend.com;
 bccsoftware.com                 signed_white    "bccsoftware.onmicrosoft.com,email.clickdimensions.com";    // some unsigned from their own servers
 bcgarticles.com                 require_signed  bcgarticles.com;
 bcgjobalerts.com                require_signed  bcgjobalerts.com;
 bethelinn.com                   signed_white    bounces.fanbridge.com;          // some unsigned mail from their own servers not listed in their spf record
 betterworldbooks.com            require_signed  mailer.betterworldbooks.com;
 bgeneral.com                    signed_white    bgeneral.com;                   // some unsigned mail via bgeneral.com
 bhfs.com                        signed_white    "bhfs.com,brownsteinhyattfarberschreck.onmicrosoft.com";    // temp errors, 0 bit key
 biblicalarchaeology.org         require_signed  biblicalarchaeology.wc08.net;
-billdove.com                    require_signed  billdove.com;                   // never signed, but must pass spf
+bicycleadventures.com           require_signed  bicycleadventures.ccsend.com;
+bidsync.com                     require_signed  bidsync.com;
+bigyam.com                      require_signed  bigyam.com;
+billdove.com                    require_signed  billdove.com;                   // unsigned mail should pass spf -all
 billerportal.com                require_signed  billerportal.com;
 billing01.email-allstate.com    require_signed  billing01.email-allstate.com;
 billpay.bankofamerica.com       require_signed  billpay.bankofamerica.com;
+billups.com                     require_signed  billups.com;
 bingads.com                     require_signed  bingads.com;
 bio.org                         require_signed  bio.org;
 birdiebug.com                   require_signed  birdiebug.com;
 birthdayalarm.com               require_signed  birthdayalarm.com;
 bistroromano.com                require_signed  bistroromano.ccsend.com;
 bitsandpieces-alerts.com        require_signed  bitsandpieces-alerts.com;
 bizbash.com                     require_signed  "bizbash.com,wixshoutout.com";
 bizbuysell.com                  require_signed  bizbuysell.com;
 bizdevworkshops.com             require_signed  cvent-planner.com;
+blacked.com                     require_signed  blacked.com;
 blueapron.com                   require_signed  blueapron.com;
 bluedge.com                     require_signed  "bluedge.com,nri605.onmicrosoft.com";
 blueshoreproperties.com         require_signed  icontactmail2.com;
 bluesoftware.com                require_signed  bluesoftware.com;
 bluesombrero.com                require_signed  send.bluesombrero.com;
 bma1.com                        require_signed  "bma1-com.20150623.gappssmtp.com,reply.onehub.com";
 bmj.com                         require_signed  bmj.com;
 bmwfs.com                       require_signed  bmwfs.com;
-bmwofdevon.com                  require_signed  xtime.com;
+bmwofdevon.com                  signed_white    xtime.com;                      // unsigned mail via emailsrvr with no spf record
-bmwofmtlaurel.com               require_signed  xtime.com;
+bmwofmtlaurel.com               signed_white    xtime.com;                      // unsigned mail via autopoint.com
 bnbestimating.com               require_signed  bnbestimating-com.20150623.gappssmtp.com;
 bnind.com                       require_signed  bnind.onmicrosoft.com;
+bnymellon.com                   require_signed  bnymellon.com;
 boatus.com                      require_signed  boatus.wc08.net;
 bobcasey.com                    signed_white    bounce.bluestatedigital.com;
 boldexperts.net                 require_signed  boldexperts-net.20150623.gappssmtp.com;
 bolideco.com                    require_signed  "bolideco-com.20150623.gappssmtp.com,bolide.ccsend.com";
 boltonpac.com                   require_signed  boltonpac.com;
 bookbub.com                     require_signed  bookbub.com;
 bookbyte.com                    require_signed  bookbyte.com;
 booking.com                     require_signed  "booking.com,sg.booking.com";
 bossard.com                     require_signed  bosnet.onmicrosoft.com;
 bounces.amazon.com              require_signed  amazon.com;
+bovitzinc.com                   require_signed  bovitzinc.onmicrosoft.com;
 box.com                         require_signed  box.com;
 boxed.com                       require_signed  boxed.com;
 boydsphila.com                  require_signed  boydsphila.ccsend.com;
 boylehotels.com                 require_signed  boylehotels.onmicrosoft.com;
 braceshop.com                   require_signed  braceshop.com;
 brandshare.us                   require_signed  brandshare.onmicrosoft.com
 brandywine.org                  signed_white    brandywineconservancyandmuseumofart.ccsend.com;     // some unsigned mail directly from their server on fios.verizon
-brenthaven.com                  require_signed  "brenthaven.com,*.mailsdlvrd.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+brenthaven.com                  require_signed  "brenthaven.com,*.mailsdlvrd.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 bridgemailsystem.com            require_signed  bridgemailsystem.com;
 britemg.com                     require_signed  advertickets.onmicrosoft.com;
 broadcaster3.medpagetoday.com   require_signed  broadcaster3.medpagetoday.com;
+broadmoor.com                   require_signed  broadmoor.com;
 brooklynmuseum.org              require_signed  brooklynmuseum.org;
 brrice.edu                      require_signed  brrice.edu;
 brucebrown.com                  require_signed  emlr2.com;
 brumark.com                     signed_white    exploring.ccsend.com;           // unsigned mail from exploring.com, no spf record
-b.strapworks.com                require_signed  triggermail.io;
+bsrreporting.com                require_signed  bsrreporting.com;
+b.strapworks.com                require_signed  "sendgrid.net,triggermail.io,*.klaviyomail.com";
 bthechange.com                  require_signed  "bthechange-com.20150623.gappssmtp.com,mequoda-btc.wc08.net";
 b.tigerdirect.com               require_signed  tigerdirect.com;
 buckscountyherald.com           require_signed  aweber.com;
 buckscounty.org                 require_signed  countyofbucks.onmicrosoft.com;
 budgetrentacartolls.com         require_signed  smtp.com;
 business.amazon.com             require_signed  business.amazon.com;
 businessinsider.com             require_signed  businessinsider.com;
 businessmanagementdaily.com     require_signed  businessmanagementdaily.com;
 bustle.com                      require_signed  bustle.com;
 b.us.underarmour.com            require_signed  "*.underarmour.com";
-buykud.com                      require_signed  "buykud.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+buykud.com                      require_signed  "buykud.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+buzzfeed.com                    require_signed  buzzfeed.com;
 cadsourcing.com                 require_signed  cadsourcing-com.20150623.gappssmtp.com;
 cafarogreenleaf.com             require_signed  cafarogreenleaf.ccsend.com;
 cafepress.com                   require_signed  cafepressinc.onmicrosoft.com;
 calbt.com                       require_signed  email-od.com;
 calendly.com                    require_signed  calendly.com;
 callforentry.org                require_signed  callforentry.org;
+callrail.com                    require_signed  callrail.com;
 calparks.org                    require_signed  mta-bbcspool.convio.net;
 calvaryabq.org                  require_signed  calvaryabq.org;
 camasb.org                      signed_white    camasb.org;                     // some unsigned mail via coxmail that fails spf
 camprrm.com                     require_signed  camprrm.ccsend.com;
 canstockphoto.com               require_signed  canstockphoto.com;
 cantaybailaconmigo.com          require_signed  musictogether.ccsend.com;
 capbluecross.com                require_signed  cvent-planner.com;
 capemaymac.org                  require_signed  capemaymac.ccsend.com;
 capitaloneemail.com             require_signed  capitaloneemail.com;
-caratsandcake.com               require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+caratsandcake.com               require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-care.comcast.com                require_signed  care.comcast.com;
+card-e.em.discover.com          require_signed  card-e.em.discover.com;
+care.comcast.com                signed_white    "care.comcast.com,mdp.comcast.net"; // sending mail with broken signatures
 careersinfosecurity.com         require_signed  careersinfosecurity.com;
 caregiveraction.org             require_signed  caregiveraction.org;
 care.gotomypc.com               require_signed  care.gotomypc.com;
 carlisleevents.com              require_signed  carlisleevents.com;
 carnivalcruiselineemail.com     require_signed  carnivalcruiselineemail.com;
 caskers.com                     require_signed  caskers.com;
 catapultmarketing.com           require_signed  epsilon.onmicrosoft.com;
 catholiccompany.com             require_signed  catholiccompany.com;
 cbginc.com                      require_signed  cbginc-com.20150623.gappssmtp.com;
 cbldf.org                       signed_white    "nationsend6.com,nationsend14.com,nationsend17.com";
-cbp.dhs.gov                     require_signed  cbpgov.onmicrosoft.com;
+cbp.dhs.gov                     require_signed  "cbp.dhs.gov,cbpgov.onmicrosoft.com";
 cbre.com                        signed_white    mailsvr.com;                    // some unsigned mail via ms *.outlook.com not listed in spf record
 cbs.com                         require_signed  "cbs.onmicrosoft.com,recurly.com";
 cbsd.org                        signed_white    cbsd.onmicrosoft.com;           // some unsigned mail via notification.com fails spf with -all
 cbskyridge.com                  require_signed  brianhall.onmicrosoft.com;
 cbslocal.com                    require_signed  cbslocal.com;
 cbsnewsletter.com               require_signed  cbsnewsletter.com;
 cbsradio.com                    require_signed  cbs.onmicrosoft.com;
+cc.aol.com                      require_signed  cc.aol.com;
 cc.att-mail.com                 require_signed  cc.att-mail.com;
 cc.binders.com                  require_signed  binders.com;
 cchcpelink.com                  require_signed  cchcpelink.com;
 c.constantcontact.com           require_signed  c.constantcontact.com;
 ccphilly.org                    require_signed  smtpcorp.com;
 ceoreport.com                   require_signed  fwbusinesspress.ccsend.com;
 ce.org                          require_signed  ce.org;
 cerner.com                      require_signed  cerner.com;                 // client of mediasupply
 cestrong.com                    require_signed  archpaper.ccsend.com;
 cfostudio.com                   require_signed  cvent-planner.com;
-chambermusicinstitute.com       require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+chairmanmom.com                 require_signed  chairmanmom.com;
+chambermusicinstitute.com       require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 change.jetblue.com              require_signed  change.jetblue.com;
 change.org                      signed_white    change.org;                 // some unsigned mail via exacttarget
+channelfactory.com              require_signed  channelfactory-com.20150623.gappssmtp.com;
 charlesmichaelphotography.com   require_signed  emlr2.com;
 checkin.email.aa.com            require_signed  checkin.email.aa.com;
-chocolateammo.com               require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+chocolateammo.com               require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 chownow.com                     require_signed  chownow.com;
 chriscoons.com                  signed_white    bounce.bluestatedigital.com;
 chrismurphy.com                 require_signed  chrismurphy.com;
 christianacare.org              signed_white    "cchs.onmicrosoft.com,mktomail.com";
 christianbook.com               require_signed  christianbook.com;
 cintas.com                      require_signed  cintas.com;
 cir.acmemarketemails.com        require_signed  cir.acmemarketemails.com;
 ciscospark.com                  require_signed  mail-a.ciscospark.com;
 citibank.com                    require_signed  citibank.com;
 citicorp.com                    require_signed  citicorp.com;
+citizensbank.com                require_signed  citizensbank.com;               // should pass spf
 citizensbankonline.com          require_signed  citizensbankonline.com;         // unsigned mail but it passes spf
 citrix.com                      signed_black    qemailserver.com;               // survey spam
 citrixonline.com                require_signed  citrixonline.com;
 citybizlist.com                 require_signed  bsf01.com;
 cityfloorsupply.com             require_signed  omktmail2.com;
 cityofchicago.org               require_signed  cityofchicago.ccsend.com;
 citytheatrical.com              require_signed  citytheatrical.ccsend.com;
 citywideloan.net                require_signed  citywideloan.net;
 civiliandefensesystems.com      require_signed  civiliandefensesystems-com.20150623.gappssmtp.com
 ciweb.org                       require_signed  chautauquainstitution.onmicrosoft.com;
+cjspianos.com                   require_signed  cjspianos-com.20150623.gappssmtp.com;
+claims.usaa.com                 require_signed  usaa.com;
+claritas.com                    require_signed  claritasllc.onmicrosoft.com;
 classicspecs.com                require_signed  classicspecs.com;
 clddigital.com                  require_signed  cldgraphics.onmicrosoft.com;
 cleanrouter.com                 require_signed  "*.cleanrouter.com";
 cleanwater.org                  require_signed  mail.salsalabs.net;
+clearchannel.com                require_signed  clearchannel.com;
 clearlaws.com                   require_signed  clearlaws.com;
 click.dandb.com                 require_signed  click.dandb.com;
 clickerdogs.com                 require_signed  clickerdogs.com;
 clilearning.com                 require_signed  clilearning.com;
 climber.com                     require_signed  climber.com;
 clothingline.com                require_signed  clothingline.ccsend.com;
 cloud.carbonite.com             require_signed  cloud.carbonite.com;
-clover.com                      require_signed  clover.com;
+clover.com                      signed_white    clover.com;                     // some unsigned mail via salesforce
 cmail.dickblick.com             require_signed  cmail.dickblick.com;
 cmclibrary.org                  require_signed  capemaycountylibrary.onmicrosoft.com;
 cm.directv.com                  require_signed  cm.directv.com;
 cmdnet.org                      require_signed  cmdnet.org;
 cm.zazzle.com                   require_signed  cm.zazzle.com
 comms.opentable.com             require_signed  comms.opentable.com;
 communication.ibx2.com          require_signed  communication.ibx2.com;
 communication.microsoft.com     require_signed  communication.microsoft.com;
 communication.ruelala.com       require_signed  communication.ruelala.com;
 communications.meredith.com     require_signed  communications.meredith.com;
+communications.onekingslane.com require_signed  communications.onekingslane.com;
 compressionsale.com             signed_white    icontactmail2.com;              // some unsigned mail via their own servers
 concur.com                      require_signed  sap.onmicrosoft.com;
-conferencegroup.com             signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+conferencegroup.com             signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 connectedcommunity.org          require_signed  connectedcommunity.org;
 connect.match.com               require_signed  connect.match.com;
 connect.sundancecatalog.com     require_signed  connect.sundancecatalog.com;
 connect.thewalkingcompany.com   require_signed  connect.thewalkingcompany.com;
 connect.wellsfargoemail.com     require_signed  connect.wellsfargoemail.com;
 contact-client.com              require_signed  contact-client.com;
 contactpigeon.com               require_signed  contactpigeon.com;
 contractimprint.com             require_signed  criticalimpactinc.com;
 cookwoods.com                   require_signed  cookwoods.ccsend.com;
 cooperhealth.org                require_signed  cooperhealth.org;
+copyblogger.com                 signed_white    mail.feedblitz.com;             // some unsigned password resets
 corcexpo.com                    require_signed  "corcexpo-com.20150623.gappssmtp.com,corcexpo.ccsend.com";
 cornell.edu                     signed_white    hubspot.com;                    // Cornell Lab of Ornithology via hubspot
 co.rockland.ny.us               require_signed  countyofrockland.onmicrosoft.com;
 corp.lawyer.com                 require_signed  "lawyer.com,referrals.lawyer.com";
 corporate-interiors.com         require_signed  corporate-interiors.ccsend.com;
 covertside.net                  require_signed  icontactmail6.com;
-cpcstrategy.com                 require_signed  cpcstrategy-com.20150623.gappssmtp.com;
+coxinc.com                      require_signed  coxinc.com;
+coyote.com                      require_signed  coyote365.onmicrosoft.com;
+cpcstrategy.com                 signed_white    cpcstrategy-com.20150623.gappssmtp.com; // some unsigned invoices via intacct.com
 cpgmatters.com                  require_signed  cpgmatters.ccsend.com;
 cpiinternational.com            require_signed  "vtiger.email,emcan1.vtigermail.com";
 cpucommunication.com            require_signed  cpucommunication.com;
 cracklefireplaces.com           require_signed  cracklefireplaces.com;
 craftunique.com                 require_signed  craftunique-com.20150623.gappssmtp.com;
 crainalerts.com                 require_signed  crainalerts.com;
 crashplan.com                   require_signed  crashplan.com;
 crcind.com                      require_signed  crcglobal.onmicrosoft.com;
 create.paper-source.com         require_signed  create.paper-source.com;
 creativecircle.com              signed_white    creativecircle.onmicrosoft.com; // some unsigned mail
-creativegroup.com               require_signed  "roberthalf.onmicrosoft.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+creativegroup.com               require_signed  "roberthalf.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 creativelive.com                require_signed  creativelive.com;
 creativemag.com                 signed_white    creativemagazine.ccsend.com;    // some unsigned mail via gmail
+creditjourney.chase.com         require_signed  creditjourney.chase.com;
 creditkarma.com                 require_signed  creditkarma.com;
 credit.paypal.com               require_signed  credit.paypal.com;
 credoaction.com                 require_signed  "credoaction.com,controlshiftlabs.com";
 crexi.com                       require_signed  crexi.com;
 crlnews.com                     require_signed  "omktmail2.com,icontactmail1.com,icontactmail9.com";
-csa.canon.com                   require_signed  "mktomail.com,mktdns.com,mktosender.com";
+csa.canon.com                   require_signed  "mktroute.com,mktomail.com,mktdns.com,mktosender.com";
 c-sgroup.com                    require_signed  c-sgroup.com;
 csifoodpro.com                  require_signed  csifoodpro.ccsend.com;
 csmail.peoplefinders.com        require_signed  csmail.peoplefinders.com;
 css.email.aa.com                require_signed  css.email.aa.com;
 csuchico.edu                    require_signed  csuchico.edu;
 currentcatalog.com              signed_white    currentcatalog.com;             // unsigned from interactive.biz failing spf
 custcommunications.sage.com     require_signed  sage.com;
 customerassist.bankofamerica.com require_signed  customerassist.bankofamerica.com;
 customer.box.com                require_signed  customer.box.com;
 customer.usps.com               require_signed  customer.usps.com;
-customink.com                   require_signed  customink.com;
+customink.com                   require_signed  "customink.com,*.customink.com";
 cutleryandmore.com              require_signed  cutleryandmore.com;
 cwf.org                         require_signed  cwfoundation.onmicrosoft.com;
 d2em.microsoft.com              require_signed  d2em.microsoft.com;
+d2pmagazine.com                 require_signed  d2pmagazine.com;
 dackconsulting.com              require_signed  "dackconsulting.onmicrosoft.com,vrmailer3.com";
 dailydeals.snoothmail.com       require_signed  mg.snoothmail.com;
 dailykos.com                    require_signed  sg.actionnetwork.org;
 dailyleak.club                  require_signed  dailyleak.club;
 daily.ozy.com                   require_signed  daily.ozy.com;
+dallasarboretum.org             require_signed  "dallasarboretum.onmicrosoft.com,auth.ccsend.com";
 dandh.com                       signed_white    email.clickdimensions.com;      // unsigned mail from their own servers with no spf
 darkironfitness.com             signed_white    aweber.com;                     // some broken signatures from aweber that fail spf
 dasd.org                        signed_white    "bbnotify.net,infosnap.com";    // some unsigned mail via bbnotify
+dashlane.com                    require_signed  dashlane.com;
 databreachtoday.com             require_signed  databreachtoday.com;
-davidfrancisfurniture.com       require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+datadist.com                    require_signed  datadist.com;                   // unsigned mail should pass spf -all
+davidfrancisfurniture.com       require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 davidsuzuki.org                 require_signed  davidsuzuki.org;
 davios.com                      require_signed  www-davios.ccsend.com;
 dayrunner.com                   require_signed  dayrunner.com;
 dayspring.com                   require_signed  dayspring.com;
 daytimer.com                    require_signed  daytimer.com;
 dcmkt.com                       require_signed  dcmkt.com;
 dd.delta.org                    require_signed  dd.delta.org;
 dealer.onstation.com            require_signed  dealer.onstation.com;
+deals.adamandeve.com            require_signed  deals.adamandeve.com;
 deals.priceline.com             require_signed  deals.priceline.com;
 defenseleadershipforum.org      require_signed  icontactmail2.com;
 deigroup.com                    require_signed  yahoo.com;
 delawaretheatre.org             signed_white    delawaretheatre.ccsend.com;     // some unsigned mail via gmail
 dell.com                        signed_white    "dell.com,sendgrid.me";         // some unsigned mail via rackspace that fails spf
 deluxe.com                      signed_white    deluxe.onmicrosoft.com;         // spf says also from mktomail and qualtrics
 demandforced3.com               require_signed  demandforced3.com;
 demandprogress.org              require_signed  demandprogress.org;
 democraticags.org               require_signed  bounce.bluestatedigital.com;
 democrats.org                   require_signed  democrats.org;
+dentalappointments.cigna.com    require_signed  dentalappointments.cigna.com;
 depaceminterris.org             signed_white    icontactmail4.com;              // some unsigned mail arriving from comcast servers
 dep.nj.gov                      require_signed  sonj.onmicrosoft.com;
 designandconstructionweek.com   require_signed  designandconstructionweek.com;
 designbandb.com                 require_signed  designbandb-com.20150623.gappssmtp.com;
 designerpages.com               require_signed  designerpages.com;
 detroitjazzfest.org             require_signed  detroitjazzfest.ccsend.com;
 dhl.com                         require_signed  dhl.com;
 diabetes.org                    require_signed  mta-bbcspool.convio.net;
 dialpad.com                     require_signed  dialpad.com;
+diamondcu.com                   require_signed  diamondcu.com;
 diamondmm.com                   require_signed  icontactmail3.com;
+dickblick.com                   signed_white    artstores.com;
 dieselpowergear.com             require_signed  "dieselpowergear.com,cmail19.com,cmail20.com";
 digdev.com                      require_signed  digdevdirect.onmicrosoft.com;
 digest.producthunt.com          require_signed  digest.producthunt.com;
 dimensiondesign.com             require_signed  "mx-senderer-02.com,mx-senderer-03.com";
 dimin.com                       require_signed  dimin-com.20150623.gappssmtp.com;
-diocesan.com                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+diocesan.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 directbuy.com                   require_signed  directbuy.com;
 direct.mercurynews.com          require_signed  direct.mercurynews.com;
 directoryofillustration.com     require_signed  directoryofillustration.com;
-directvote.net                  require_signed  smtpsendmail.com;
+directvote.net                  require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 discogs.com                     require_signed  discogs.com;
 discountschoolsupply.com        require_signed  discountschoolsupply.com;
 discoverphl.com                 require_signed  discoverphl.com;
-discovery.com                   require_signed  discoverycomm.onmicrosoft.com;
+discovery.com                   signed_white    discoverycomm.onmicrosoft.com;  // some unsigned mail via scrippsnetworks.com
 discover.zinio.com              require_signed  discover.zinio.com;
 dishemail.com                   require_signed  dishemail.com;
+disney.com                      require_signed  twdc.onmicrosoft.com;
 ditech-notify.com               require_signed  ditech-notify.com;
 divenewsletter.com              require_signed  divenewsletter.com;
 diversityagenda.com             require_signed  theconferencecenter.ccsend.com;
 djmarks.com                     require_signed  djmarks.ccsend.com;
 dlsdiscovery.net                require_signed  dlsdiscovery.net;
 dmgiant.del2.com                require_signed  del2.com;
 dmrgraphics.com                 require_signed  netorgft3071376.onmicrosoft.com;
+dnaseattle.com                  require_signed  dnaseattle.onmicrosoft.com;
 dnb.com                         require_signed  dnb.com;
 dnc.com                         require_signed  dnc.com;
 dnc.org                         require_signed  dnc.org;
 doa.nc.gov                      require_signed  doa.nc.gov;
 docusign.com                    require_signed  docusign.com;
+docusign.net                    require_signed  docusign.net;
 doelegal.com                    require_signed  doelegal.com;
 dogseminarsdirectory.com        require_signed  doggiemanners.ccsend.com;
 dola.com                        require_signed  "dola.com,dola-com.20150623.gappssmtp.com";
 dolenutritionnews.com           require_signed  dolenutritionnews.com;
-dolphinproject.com              require_signed  sg.actionnetwork.org;
+dolphinproject.com              require_signed  "*.actionnetwork.org";
 donaldjtrump.com                require_signed  donaldjtrump.com;
 donaldson.com                   require_signed  donaldson.onmicrosoft.com;
-doodle.com                      require_signed  e.doodle.com;
+doodle.com                      require_signed  "e.doodle.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-dor.state.ma.us                 signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+doordash.com                    signed_white    doordash.com;                   // some unsigned mail via salesforce
+dor.ga.gov                      require_signed  dor.ga.gov;
+dor.state.ma.us                 signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 dpreview.com                    require_signed  dpreview.com;
-dreamstime.com                  require_signed  dreamstime.com;
 drexel.edu                      require_signed  "drexel0.onmicrosoft.com,www-drexel.ccsend.com,imodules.com";
 drfmail.com                     require_signed  drfmail.com;
 drobo.com                       require_signed  drobo.com;
 dropbox.com                     require_signed  dropbox.com;
 dropboxmail.com                 require_signed  dropboxmail.com;
 drpa.org                        require_signed  "drpapatco.onmicrosoft.com,drpapatco.ccsend.com";
 drsfostersmith.com              require_signed  drsfostersmith.com;
-drwc.org                        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+drwc.org                        require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 dscc.org                        signed_white    dscc.org;                       // some unsigned mail via bluestatedigital
 dslgroup.com                    require_signed  dslgroup.ccsend.com;            // needs spf for some unsigned mail from their own servers
 ducotech.com                    signed_white    ducotech.ccsend.com;            // some unsigned mail from their own servers
 dullesmetro.com                 require_signed  dullesmetro.ccsend.com;
 duluthtradingemail.com          require_signed  duluthtradingemail.com;
+duncanchannon.com               require_signed  duncanchannon-com.20150623.gappssmtp.com;
 dunnemanning.com                require_signed  dunnemanning-com.20150623.gappssmtp.com;
 dvd.com                         require_signed  dvd.com;
 dvfbc.com                       require_signed  dvfbc.ccsend.com;
 dwquailgolf.com                 require_signed  icontactmail1.com;
 dynadmic.com                    require_signed  dynadmic.onmicrosoft.com;
 ealerts.bankofamerica.com       require_signed  ealerts.bankofamerica.com;
 e.allrecipes.com                require_signed  e.allrecipes.com;
 ealogistics.com                 require_signed  "ealogistics1.onmicrosoft.com,ealogistics.ccsend.com";
 e.appleseeds.com                require_signed  e.appleseeds.com;
 eastsideco.com                  require_signed  eastsideco.com;
-eastwood.com                    require_signed  eastwood.com;
+eastwood.com                    signed_white    eastwood.com;                   // unsigned mail from their own web servers fails strong spf
+easy.staplesadvantage.com       require_signed  easy.staplesadvantage.com;
 easy.staples.com                require_signed  easy.staples.com;
 easywoodtools.com               require_signed  easywoodtools.ccsend.com;
 eat24.com                       require_signed  eat24.com;
 e.att-mail.com                  require_signed  e.att-mail.com;
 e.avis.com                      require_signed  e.avis.com;
 e.basbleu.com                   require_signed  e.basbleu.com;
 ebay.com                        require_signed  ebay.com;
 e.berries.com                   require_signed  e.berries.com;
 e.bevmo.com                     require_signed  e.bevmo.com;
 e.bloomingdales.com             require_signed  e.bloomingdales.com;
-e.blueapron.com                 require_signed  e.blueapron.com;
+e.blueapron.com                 require_signed  "blueapron.com,e.blueapron.com";
 e.borrowlenses.com              require_signed  e.borrowlenses.com;
 e.budget.com                    require_signed  e.budget.com;
 e.build.com                     require_signed  e.build.com;
 e.business.officedepot.com      require_signed  e.business.officedepot.com;
 e.campingworld.com              require_signed  e.campingworld.com;
 e.campingworldrv.com            require_signed  e.campingworldrv.com;
 ecerts.americanexpress.com      require_signed  ecerts.americanexpress.com;
 e.chase.com                     require_signed  e.chase.com;
 echosign.com                    require_signed  echosign.com;
-e.clarksusa.com                 require_signed  "e.clarksusa.com,bounceexchange.com";
+e.clarksusa.com                 signed_white    "e.clarksusa.com,bounceexchange.com";   // some unsigned mail via exacttarget
 eclinicalmail.com               require_signed  eclinicalmail.com;
 eclipsegr.com                   require_signed  eclipsegr-com.20150623.gappssmtp.com;
 e.colehaan.com                  require_signed  e.colehaan.com;
 e.collegeboard.org              require_signed  e.collegeboard.org;
 e.columbia.com                  require_signed  e.columbia.com;
 e.comixology.com                require_signed  e.comixology.com;
 ecommail.walgreens.com          require_signed  ecommail.walgreens.com;
 economist.com                   require_signed  economist.com;
 e.constantcontact.com           require_signed  e.constantcontact.com;
 e.copart.com                    require_signed  e.copart.com;
-e.crainalerts.com               require_signed  e.crainalerts.com;
 ecrmemail.verizonwireless.com   require_signed  verizonwireless.com;
 e.customink.com                 require_signed  e.customink.com;
+e.dailysales.com                require_signed  e.dailysales.com;
 edelivery.citi.com              require_signed  edelivery.citi.com;
 e.delta.com                     require_signed  e.delta.com;
 e.deluxe.com                    require_signed  e.deluxe.com;
+edencollective.co               require_signed  edencollective-co.20150623.gappssmtp.com;
 edgewaternetworks.com           require_signed  edgewaternetworks.com;
 ed.gov                          require_signed  "ed.gov,*.ed.gov";
 e.digikey.com                   require_signed  e.digikey.com;
 e.discover.com                  require_signed  e.discover.com
 e.disneyinteractive.com         require_signed  e.disneyinteractive.com;
 e.doverpublishing.com           require_signed  e.doverpublishing.com;
+e.drapers.com                   require_signed  e.drapers.com;
 e.drugstore.com                 require_signed  e.drugstore.com;
 edu.cpaacademy.org              require_signed  edu.cpaacademy.org;
 e.ea.com                        require_signed  e.ea.com;
 e.economist.com                 require_signed  e.economist.com;
 e.eddiebauer.com                require_signed  e.eddiebauer.com;
 e.feld-inc.com                  require_signed  e.feld-inc.com;
 effem.com                       signed_white    effem.com;                      // some unsigned coupon mail via nchmarketing.com
 efi.com                         require_signed  efi.com;
 e.fitbit.com                    require_signed  e.fitbit.com;
 efolder.net                     require_signed  mktroute.com;
+e.freepeople.com                require_signed  e.freepeople.com;
 e.gamestop.com                  require_signed  e.gamestop.com;
 e.geappliances.com              require_signed  e.geappliances.com;
 e.gogoair.com                   require_signed  e.gogoair.com;
 e.goodsamroadside.com           require_signed  e.goodsamroadside.com;
 e.gourmetgiftbaskets.com        require_signed  e.gourmetgiftbaskets.com;
 e.grainger.com                  require_signed  e.grainger.com;
 egress.com                      require_signed  egress.com;
 e.grubhub.com                   require_signed  e.grubhub.com;
 e.healthandwellnessalerts.berkeley.edu require_signed  e.healthandwellnessalerts.berkeley.edu;
 e.highlights.com                require_signed  e.highlights.com;
+e.hollywoodreporter.com         require_signed  e.hollywoodreporter.com;
 e.homechef.com                  require_signed  e.homechef.com;
 e.hotwire.com                   require_signed  e.hotwire.com;
 e.hyatt.com                     require_signed  e.hyatt.com;
 eightcoupons.com                require_signed  eightcoupons.com;
 e.intuit.com                    require_signed  e.intuit.com;
 elizabethwarren.com             signed_white    bounce.bluestatedigital.com;
 ellie.com                       require_signed  ellie.com;
 elmlogistics.com                require_signed  elmlogistics.ccsend.com;
 e.lordandtaylor.com             require_signed  e.lordandtaylor.com;
 e.lowes.com                     require_signed  e.lowes.com;
-elsevier.com                    require_signed  elsevier.com;
+elsevier.com                    signed_white    elsevier.com;                   // some unsigned receipts via beechglen.com
-elsoln1.com                     require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+elsoln1.com                     require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 e.luckybrand.com                require_signed  e.luckybrand.com;
 e.lumberliquidators.com         require_signed  e.lumberliquidators.com;
+elzufon.com                     require_signed  elzufon.com;
 em.1800flowers.com              require_signed  em.1800flowers.com;
 em.adweek.com                   require_signed  em.adweek.com;
 email1.avery.com                require_signed  email1.avery.com;
 email1.garmin.com               require_signed  email1.garmin.com;
 email1.geico.com                require_signed  email1.geico.com;
 email.aarp.org                  require_signed  email.aarp.org;
 email.acmemarketemail.com       require_signed  email.acmemarketemail.com;
 email.aegeanair.com             require_signed  email.aegeanair.com;
 email.alignable.com             require_signed  "*.alignable.com";
 email.allrecipes.com            require_signed  email.allrecipes.com;
+email.alm.com                   require_signed  email.alm.com;
 email.amc.com                   require_signed  email.amc.com;
 email.americanexpress.com       require_signed  email.americanexpress.com;
 email.americangreetings.com     require_signed  email.americangreetings.com;
+email.amexgiftcard.com          require_signed  email.amexgiftcard.com;
 e-mail.amtrak.com               require_signed  e-mail.amtrak.com;
 email.ancestry.com              require_signed  email.ancestry.com;
 email.anthem.com                require_signed  email.anthem.com;
 email.apple.com                 require_signed  email.apple.com;
 email.athleta.com               require_signed  email.athleta.com;
 email.bananarepublicfactory.com require_signed  email.bananarepublicfactory.com;
 email.bandh.com                 require_signed  email.bandh.com;
 email.bbc.com                   require_signed  email.bbc.com;
 emailbedbathandbeyond.com       require_signed  emailbedbathandbeyond.com;
 email.bjs.com                   require_signed  email.bjs.com;
+email.bostonglobe.com           require_signed  email.bostonglobe.com;
 email.box.com                   require_signed  "email.box.com,mktdns.com";
+emailbuybuybaby.com             unsigned_black  emailbuybuybaby.com;
 email.caesars-marketing.com     require_signed  email.caesars-marketing.com;
 email.calphalon.com             require_signed  email.calphalon.com;
 email.cbssports.com             require_signed  email.cbssports.com;
 email.chase.com                 require_signed  email.chase.com;
 email.cheaptickets.com          require_signed  email.cheaptickets.com;
 email.chop.edu                  require_signed  email.chop.edu;
 emailchristmastreeshops.com     require_signed  emailchristmastreeshops.com;
+email.clarksusa.com             require_signed  email.clarksusa.com;
 email.coldwatercreek.com        require_signed  coldwatercreek.com;
 emailcoldwatercreek.com         require_signed  emailcoldwatercreek.com;
 email.comcastsportsnet.com      require_signed  email.comcastsportsnet.com;
 email.conservativeintel.com     require_signed  email.conservativeintel.com;
 email.consumerreports.org       require_signed  email.consumerreports.org;
 emailff.att-mail.com            signed_white    emailff.att-mail.com;           // some unsigned
 email.foliomag.com              require_signed  email.foliomag.com;
 email.foodandwine.com           require_signed  email.foodandwine.com;
 email.food.com                  require_signed  email.food.com;
 email.foodnetwork.com           require_signed  email.foodnetwork.com;
+email.frame.io                  require_signed  email.frame.io;
 email.furnacecreekresort.com    require_signed  email.furnacecreekresort.com;
 email.gaiam.com                 require_signed  "email.gaiam.com,pmta.sailthru.com";
 email-galls.com                 require_signed  email-galls.com;
 email.gap.com                   require_signed  email.gap.com;
 email.gapfactory.com            require_signed  email.gapfactory.com;
 email.healthecareers.com        require_signed  email.healthecareers.com;
 email.hgtv.com                  require_signed  email.hgtv.com;
 email.highmarkhealth.com        require_signed  email.highmarkhealth.com;
 email.homedepot.com             require_signed  email.homedepot.com;
 email-honeywell.com             require_signed  email-honeywell.com;
+email.horizonblue.com           require_signed  email.horizonblue.com;
 email.hpconnected.com           require_signed  email.hpconnected.com;
 email.hsn.com                   require_signed  email.hsn.com;
 email.iamsinc.com               require_signed  iamsinc.com;
 emailinfo.bestbuy.com           require_signed  emailinfo.bestbuy.com;
+email.insideradio.com           require_signed  email.insideradio.com;
 email.jackfrostnational.com     require_signed  email.jackfrostnational.com;
 email.jacquielawson.com         require_signed  email.jacquielawson.com;
 email.jcrew.com                 require_signed  email.jcrew.com;
 email.jetblue.com               require_signed  email.jetblue.com;
-email.joistapp.com              require_signed  "mandrillapp.com,email.joistapp.com";
+email.joistapp.com              require_signed  "mandrillapp.com,mailchimpapp.net,email.joistapp.com";
 email.justflyemail.com          require_signed  email.justflyemail.com;
 email.kqed.org                  require_signed  email.kqed.org;
 email.laithwaiteswine.com       require_signed  email.laithwaiteswine.com;
 email.lakeshorelearning.com     require_signed  email.lakeshorelearning.com;
 email.landroverusa.com          require_signed  email.landroverusa.com;
 email-libertymutual.com         require_signed  email-libertymutual.com;
 email-lifetouch.com             require_signed  email-lifetouch.com;
 email.livenation.com            require_signed  email.livenation.com;
 email.livestrong.com            require_signed  livestrong.com;
 email-marriott.com              require_signed  email-marriott.com;
+email.merchantcenter.intuit.com require_signed  notification.intuit.com;
 email.microsoftonline.com       require_signed  email.microsoftonline.com;
 email.microsoftrewards.com      require_signed  email.microsoftrewards.com;
 email-modells.com               require_signed  "bounceexchange.com,email-modells.com";
 email.modells.com               require_signed  email.modells.com;
 email.mrporter.com              require_signed  email.mrporter.com;
 email-nationwide.com            require_signed  email-nationwide.com;
 email.naturehills.com           require_signed  "email.naturehills.com,klaviyomail.com";
 email.naviance.com              require_signed  email.naviance.com;
 email.newegg.com                require_signed  email.newegg.com;
 email.newpig.com                require_signed  email.newpig.com;
+email.newyorktimes.com          require_signed  email.newyorktimes.com;
 email.nick.com                  require_signed  email.nick.com;
 email-nmss.org                  require_signed  email-nmss.org;
 email.norton.com                require_signed  email.norton.com;
 emailoffer.griotsgarage.com     require_signed  emailoffer.griotsgarage.com;
 email.office.com                require_signed  email.office.com;
 email.parts-express.com         require_signed  email.parts-express.com;
 email.payless.com               require_signed  "payless.com,email.payless.com";
 email-petsmart.com              require_signed  email-petsmart.com;
 email.petvalu.com               require_signed  email.petvalu.com;
 email-philly.com                require_signed  email-philly.com;
+email.photo.walgreens.com       require_signed  email.photo.walgreens.com;
 email.quickenloans.com          require_signed  email.quickenloans.com;
 email.renttherunway.com         require_signed  email.renttherunway.com;
 email.republicservices.com      require_signed  email.republicservices.com;
 emailrestaurant.com             require_signed  emailrestaurant.com;
 email.rewardsnetwork.com        require_signed  email.rewardsnetwork.com;
 email.sj.aaa.com                require_signed  email.sj.aaa.com;
 email.snagajob.com              require_signed  email.snagajob.com;
 emails.nixle.com                require_signed  "emails.nixle.com,smtp.nixle.com";
 emails.nwruk.com                require_signed  emails.nwruk.com;
 email.sonyentertainmentnetwork.com require_signed  email.sonyentertainmentnetwork.com;
+emails.opentable.com            require_signed  emails.opentable.com;
 emails.pitneybowes.com          require_signed  emails.pitneybowes.com;
 email.sportsline.com            require_signed  email.sportsline.com;
 emails.rakuten.com              require_signed  emails.rakuten.com;
 emails.schwans.com              require_signed  emails.schwans.com;
 emails.snapfish.com             require_signed  emails.snapfish.com;
 email.stitchfix.com             require_signed  email.stitchfix.com;
 emails.toptenreviews.com        require_signed  emails.toptenreviews.com;
 emails.touchofclass.com         require_signed  touchofclass.com;
 emails.underarmour.com          require_signed  emails.underarmour.com;
 email.supermediastore.com       require_signed  email.supermediastore.com;
-emails.ups.com                  require_signed  ups.com;
+emails.ups.com                  require_signed  "emails.ups.com,ups.com";
 emails.williamsandkent.com      require_signed  emails.williamsandkent.com;
 emails.wyndhamhotelgroup.com    require_signed  emails.wyndhamhotelgroup.com;
 e-mails.wyndhamrewards.com      require_signed  e-mails.wyndhamrewards.com;
 emails.xfinity.com              require_signed  emails.xfinity.com;
 email.targetportraits.com       require_signed  email.targetportraits.com;
 email.tastingroom.com           require_signed  email.tastingroom.com;
+email.teamsnap.com              require_signed  email.teamsnap.com;
 email.techmedianetwork.com      require_signed  email.techmedianetwork.com;
 email.teva.com                  require_signed  email.teva.com;
 email.tgw.com                   require_signed  email.tgw.com;
 email.thecompanystore.com       require_signed  "thecompanystore.com,email.thecompanystore.com";
 email.the-cover-store.com       require_signed  email.the-cover-store.com;
 email-winzip.com                require_signed  email-winzip.com;
 emailworldmarket.com            require_signed  emailworldmarket.com;
 email.wsfsbank.com              require_signed  email.wsfsbank.com;
 email.wyndhamvo.com             require_signed  email.wyndhamvo.com;
 email.ydmailer.com              require_signed  email.yodle.com;
-email.zappos.com                require_signed  email.zappos.com;
+email.zappos.com                signed_white    email.zappos.com;               // key no longer in dns
 email.zazzle.com                require_signed  zazzle.com;
 email.zionlodge.com             require_signed  email.zionlodge.com;
 em.apartmentlist.com            require_signed  apartmentlist.com;
 emarketing.sixers.com           require_signed  emarketing.sixers.com;
 e-marriott.com                  require_signed  e-marriott.com;
 e.mars.com                      require_signed  mail.fagms.de;
 em.assurantsolutions.com        require_signed  em.assurantsolutions.com;
 e.match.com                     require_signed  e.match.com;
-embarqcreative.com              require_signed  embarqcreative.com;
+embarqcreative.com              signed_white    embarqcreative.com;             // some unsigned mail via their own mail server
 em.bbt.com                      require_signed  em.bbt.com;
 em.bloomstoday.com              require_signed  em.bloomstoday.com;
 embryriddleundergraduate.org    require_signed  embryriddleundergraduate.org;
 em.citizensbank.com             require_signed  em.citizensbank.com;
 em.dgcatalog.net                require_signed  em.dgcatalog.net;
 emilyslist.org                  signed_white    bounce.bluestatedigital.com;    // some unsigned mail via bluestatedigital
 emirates.email                  require_signed  emirates.email;
 emjreviews.com                  require_signed  zcsend.net;
 em.keurig.com                   require_signed  em.keurig.com;
 eml.condenast.com               require_signed  eml.condenast.com;
+eml.nordstrom.com               require_signed  eml.nordstrom.com;
 em.mandalaybay.com              require_signed  em.mandalaybay.com;
+emmanuelins.com                 require_signed  emmanuelins.onmicrosoft.com;
 em.mgcatalog.net                require_signed  em.mgcatalog.net;
 em.mgmnationalharbor.com        require_signed  em.mgmnationalharbor.com;
 em.mgmresorts.com               require_signed  em.mgmresorts.com;
 em.newyorknewyork.com           require_signed  em.newyorknewyork.com;
 em.nordstrom.com                require_signed  "em.nordstrom.com,nordstrom.com";
 em.searshomeservices.com        require_signed  em.searshomeservices.com;
 em.searspartsdirect.com         require_signed  em.searspartsdirect.com;
 em.sfbcoffee.com                require_signed  sfbcoffee.com;
 em.shop-companyofdogs.com       require_signed  em.shop-companyofdogs.com;
 em.shop-potpourri.com           require_signed  em.shop-potpourri.com;
+em.shutterfly.com               require_signed  em.shutterfly.com;
 ems.travelers.com               require_signed  ems.travelers.com;
 em.target.com                   require_signed  em.target.com;
 e.murad.com                     require_signed  e.murad.com;
 em.vdara.com                    require_signed  em.vdara.com;
 em.venetian.com                 require_signed  em.venetian.com;
+em.vonage.com                   require_signed  em.vonage.com;
 em.westmarine.com               require_signed  em.westmarine.com;
 em.wwcatalog.net                require_signed  em.wwcatalog.net;
 e.mypublisher.com               require_signed  e.mypublisher.com;
 em.zales.com                    require_signed  em.zales.com;
 e.nationalgeographic.com        require_signed  e.nationalgeographic.com
 enews.swimstyle.com             require_signed  swimstyle.com;
 e.newyorktimesinfo.com          require_signed  e.newyorktimesinfo.com;
 engagebycell.com                require_signed  engagebycell.com;
 e.njadvancemedia.com            require_signed  e.njadvancemedia.com;
 e.nm.com                        require_signed  e.nm.com;
-en.nydailynews.com              require_signed  en.nydailynews.com;
+en.nydailynews.com              signed_white    en.nydailynews.com;             // was signed, but they broke their _domainkey dns record
 e.nordstromrack.com             require_signed  e.nordstromrack.com;
 e.normthompson.com              require_signed  e.normthompson.com;
 entercom.com                    signed_white    entercom.com;                   // unsigned mail from their own mail servers, not listed in their spf record
 e.officedepot.com               require_signed  e.officedepot.com;
 e.online.att-mail.com           require_signed  e.online.att-mail.com;
 e.pnc.com                       require_signed  e.pnc.com;
 e.pond5.com                     require_signed  e.pond5.com;
 e.proflowers.com                require_signed  e.proflowers.com;
 e.progressive.com               require_signed  e.progressive.com;
 e.proplants.com                 require_signed  e.proplants.com;
+epysa.org                       require_signed  "epysa.org,epysa.onmicrosoft.com";
 equalexchange.coop              require_signed  equalexchange.coop;
 e.quill.com                     require_signed  e.quill.com;
+equuscs.com                     require_signed  rimagede.onmicrosoft.com;
 e.ralphlauren.com               require_signed  e.ralphlauren.com;
 e.readyrefresh.com              require_signed  e.readyrefresh.com;
 e.redbubble.com                 require_signed  e.redbubble.com;
 e.restorationhardware.com       require_signed  e.restorationhardware.com;
 e.revolutiongolf.com            require_signed  e.revolutiongolf.com;
 e.showmanagement.com            require_signed  e.showmanagement.com;
 e.shutterfly.com                require_signed  e.shutterfly.com;
 e.siriusxm.com                  require_signed  e.siriusxm.com;
 e-skillpath.com                 require_signed  e-skillpath.com;
 e.smilereminder.com             require_signed  smilereminder.com;
-e.snowbasin.com                 require_signed  e.snowbasin.com;                // needs spf, 200608._domainkey.e.snowbasin.com record not found
+e.snowbasin.com                 signed_white    e.snowbasin.com;                // 200608._domainkey.e.snowbasin.com record not found, used to pass spf but that txt record is now gone also
 esri.com                        signed_white    esri.com;                       // some unsigned mail via pphosted
 essentialhardware.com           signed_white    essentialhardware.com;          // some unsigned mail via klaviyomail.com
 e.staplespromotionalproducts.com require_signed  e.staplespromotionalproducts.com;
 e.starbucks.com                 require_signed  e.starbucks.com;
 e.starwoodhotelsemail.com       require_signed  e.starwoodhotelsemail.com;
 e.swimsuitsforall.com           require_signed  e.swimsuitsforall.com
 e.takepart.com                  require_signed  e.takepart.com;
 e.target.com                    require_signed  e.target.com;
 e.tdbank.com                    require_signed  e.tdbank.com;
 e.teavana.com                   require_signed  e.teavana.com;
-e.therealdeal.com               require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+e.therealdeal.com               require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+et-notifications.asurion.com    require_signed  asurion.com;                    // key not in dns, but should pass strong spf
 et.npr.org                      require_signed  et.npr.org;
 et.nprstations.org              require_signed  et.nprstations.org;
-e.toyota.com                    require_signed  e.toyota.com;
+e.togshop.com                   require_signed  e.togshop.com;
+e.toyota.com                    require_signed  "e.toyota.com,amazonses.com";
 etrailer.com                    require_signed  icontactmail1.com;
 etrainingschool.com             require_signed  criticalimpactinc.com;
 e.travelocity.com               require_signed  "mg.travelocity.com,mg.expediamail.com";
 e.tripadvisor.com               require_signed  e.tripadvisor.com;
 etsy.com                        require_signed  mail.etsy.com;
 eurotechsoccer.com              require_signed  icontactmail3.com;
 e.usa.experian.com              require_signed  e.usa.experian.com;
 eu.sony.com                     require_signed  sony.onmicrosoft.com;
 e-vanguardcharitable.org        require_signed  e-vanguardcharitable.org;
 eventbriteacademy.com           require_signed  eventbriteacademy.com;
-eventbrite.com                  require_signed  "eventbrite.com,eventbrite-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+eventbrite.com                  require_signed  "eventbrite.com,eventbrite-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 events.aegpresents.com          require_signed  events.aegpresents.com;
 events.bisnow.com               require_signed  events.bisnow.com;
+events.comcast-spectacor.com    require_signed  events.comcast-spectacor.com;
 everbridge.net                  require_signed  everbridge.net;
 everkerr.com                    require_signed  everkerr.com;
 everlane.com                    require_signed  everlane.com;
 everydayhealth.com              require_signed  everydayhealth.com;
 e.vetrifamily.com               require_signed  e.vetrifamily.com;
 e.walgreens.com                 require_signed  e.walgreens.com;
 e.washingtonpost.com            require_signed  e.washingtonpost.com;
 e.westernjournalism.com         require_signed  e.westernjournalism.com;
 e.winecountrygiftbaskets.com    require_signed  e.winecountrygiftbaskets.com;
 e.wintersilks.com               require_signed  e.wintersilks.com;
+e.wisteria.com                  require_signed  "e.wisteria.com,wisteria.com";
 ewomennetwork.com               signed_white    ewomennetwork.com;
 e.woolovers.com                 require_signed  e.woolovers.com;
 exacttarget.change.org          require_signed  exacttarget.change.org;
 examine.com                     require_signed  "ck.examine.com,smtp.groovehq.com";
 exchange.calstatela.edu         require_signed  csula.onmicrosoft.com;
 explore.oceaniacruises.com      require_signed  explore.oceaniacruises.com;
 explore.pinterest.com           require_signed  explore.pinterest.com;
 explore.thenorthface.com        require_signed  explore.thenorthface.com;
 expolinc.us                     signed_white    expolinc.ccsend.com;            // some unsigned mail from their outbound servers, no spf record
 exponation.net                  require_signed  "exponation-net.20150623.gappssmtp.com,auth.ccsend.com,icontactmail1.com";
+exponential.com                 require_signed  exponentialinc.onmicrosoft.com;
 extracare.cvs.com               require_signed  extracare.cvs.com;
+extremereach.com                require_signed  extremereach.com;
+extremerestraints.com           require_signed  icontactmail9.com;
 exworkscapital.com              signed_white    198.memberemail.com;            // some unsigned mail via exacttarget, might be spam
 eyecareprovider.com             require_signed  eyecareprovider.com;
-eystudios.com                   require_signed  eystudios.ccsend.com;
+eystudios.com                   require_signed  "eystudios-com.20150623.gappssmtp.com,eystudios.ccsend.com";
 e.zulily.com                    require_signed  e.zulily.com;
 ezup.com                        signed_white    "ezup.com,ezup.onmicrosoft.com";    // some other unsigned mail via quotevalet.com
 facebookmail.com                require_signed  facebookmail.com;
 failsafeinc.com                 require_signed  icontactmail6.com;
 fairmontemailcommunications.com require_signed  "fairmontemailcommunications.com,cmail19.com,cmail20.com";
 famous-smoke.com                require_signed  famous-smoke.com;
 fanduelmail.com                 require_signed  fanduelmail.com;
 fanshop.mlblists.com            require_signed  fanshop.mlblists.com;
 fans.legacyrecordings.com       require_signed  fans.legacyrecordings.com;
 fantasysports.communications.yahoo.com require_signed  fantasysports.communications.yahoo.com;
-fantomdrives.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+fantomdrives.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 farmsanctuary.org               require_signed  mta-bbcspool.convio.net;
 fashionbizinc.org               require_signed  fashionbizinc.ccsend.com;
 fastspring.com                  require_signed  fastspring.com;
+fatherly.com                    require_signed  fatherly-com.20150623.gappssmtp.com;
 fedbarlive.org                  signed_white    "emsend.com,em.secureserver.net";   // emsend signing with domainkeys, not dkim
+federalreserve.com              unsigned_black  federalreserve.com;
 fedex.com                       require_signed  fedex.com;
 fedgovconnect.org               require_signed  fedgovconnect-org.20150623.gappssmtp.com;
 feedvisor.com                   require_signed  "feedvisor-com.20150623.gappssmtp.com,feedvisor.com";
 feliciansisters.org             require_signed  feliciansisters.onmicrosoft.com;
 fidf.org                        require_signed  "bounce.bluestatedigital.com,auth.ccsend.com";
 fiercehealthpayer.com           require_signed  fiercehealthpayer.com;
+fiercepharma.com                require_signed  fiercepharma.com;
 fightforreform.org              signed_white    bounce.bluestatedigital.com;    // some unsigned mail from bluestate
 fileandservedelaware.com        require_signed  fileandserve.com;
-filmadelphia.org                signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+filmadelphia.org                signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 firebirdpresort.com             require_signed  firebirdpresort.onmicrosoft.com;
 firecracker10k.org              require_signed  icontactmail4.com;
 fire-design.fr                  require_signed  newsletter.fire-design.fr;
+fireflyon.com                   require_signed  fireflyon-com.20150623.gappssmtp.com;
 firefox.com                     require_signed  firefox.com;
 firstam.com                     require_signed  firstam.com;
 firstleaf.club                  require_signed  "firstleaf.club,pmta.sailthru.com";
 fisherunitech.com               require_signed  fisherunitech.com;
 fitbit.com                      require_signed  email.fitbit.com
 fivethirtyeight.com             require_signed  fivethirtyeight.com;
 fixthedebt.org                  require_signed  bounce.bluestatedigital.com;
 fladems.com                     signed_white    "fladems.com,bounce.bluestatedigital.com";
 fladems.org                     signed_white    bounce.bluestatedigital.com;
 flagandbanner.com               require_signed  omktmail2.com;
-flagsource.com                  require_signed  flagsource.ccsend.com;
+flagsource.com                  require_signed  "flagsource.ccsend.com,*.onmicrosoft.com;
-flaticon.com                    require_signed  "mandrillapp.com,flaticon.com";
+flaticon.com                    require_signed  "mandrillapp.com,mailchimpapp.net,flaticon.com";
 flaviar.com                     require_signed  flaviar.com;
 flexjobs.com                    require_signed  flexjobs.com;
 flickr.com                      require_signed  flickr.com;
 fluidreview.com                 require_signed  chide.it;
+fly2.spirit-airlines.com        require_signed  fly2.spirit-airlines.com;
 fly.com                         require_signed  fly.com;
 fly.spirit-airlines.com         require_signed  fly.spirit-airlines.com;
 fmidm.com                       signed_white    "fmidm.com,fmidirectmail.onmicrosoft.com";  // some unsigned mail via their own servers
 followmyhealth.com              require_signed  email.followmyhealth.com;
-fontexplorerx.com               signed_white    email.monotype.com;             // some unsigned mail from salesforce
+fontexplorerx.com               signed_white    email.monotype.com;             // some unsigned mail via salesforce
 foolsubs.com                    require_signed  foolsubs.com;
 footballcamps.com               require_signed  footballcamps.com;
 footsolutions.com               require_signed  footsolutions.com;
+forbes.com.br                   require_signed  forbes-com-br.20150623.gappssmtp.com;
 foreseeresults.com              require_signed  4cresults.com;
 foreupsoftware.com              require_signed  foreupsoftware.com;
-formdecor.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+formdecor.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 fortispay.com                   require_signed  fortispay.com;
 fourhourbody.com                require_signed  fourhourbody.com;
+fox.com                         require_signed  "foxgroupinc.onmicrosoft.com,cmail19.com,cmail20.com";
 foxcreative.net                 signed_white    emlr2.com;                      // some unsigned mail via ms outlook
 foxtv.com                       require_signed  foxtv.onmicrosoft.com;
-frame.io                        require_signed  frame.io;
+frame.io                        require_signed  "frame.io,amazonses.com";
 fraudprevention.chase.com       require_signed  fraudprevention.chase.com;
-freeconference.com              require_signed  freeconference.com;
+freeconference.com              signed_white    freeconference.com;             // allow their messages to be forwarded
 freedomforallamericans.org      require_signed  bounce.bluestatedigital.com;
 freepik-mail.com                require_signed  freepik-mail.com;
 from.ieee.org                   require_signed  from.ieee.org;
 fsshelpdesk.org                 require_signed  news.fedhelpdesk.org;
 fult.com                        require_signed  fultonbank.onmicrosoft.com;
 fusioncharts.com                require_signed  fusioncharts.com;
-futurity.org                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+futurity.org                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 gahmusa.org                     require_signed  gahmusa.org;                    // cgale unsubscribed 2017-06-28
-gahsp.org                       require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+gahsp.org                       require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+gallegosunited.com              require_signed  gallegosunited-com.20150623.gappssmtp.com;
 gamechanger.io                  require_signed  gamechanger.io;
 gap.com                         require_signed  gap.com;
 gate1mail.com                   require_signed  gate1mail.com;
 gc.email.amazon.com             require_signed  amazon.com;                     // gift cards
 gcihealth.com                   require_signed  yrb.onmicrosoft.com;
-generation-brands.com           require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+generation-brands.com           require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 genghisgrill.com                require_signed  "pxsmail.com,khansklub.pxsmail.com";
 geocaching.com                  require_signed  geocaching.com;
 gershmany.org                   signed_white    mail196.atl61.mcsv.net;
 gerstmangroup.com               require_signed  "auth.ccsend.com,questservicegroup.ccsend.com";
 ges.com                         signed_white    "ges.com,viadcorp.onmicrosoft.com";
+getfpv.com                      require_signed  getfpv.com;
 getjibjab.com                   require_signed  getjibjab.com;
 getty.edu                       require_signed  gettytrust.onmicrosoft.com;
 gge4mailer.com                  signed_white    email.gge4mailer.com;
-ggimageusa.com                  require_signed  "ggimageusa-com.20150623.gappssmtp.com,smtpserver.email,smtpsendmail.com";
+ggimageusa.com                  require_signed  "icontact.com,icontactmail3.com,smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com,ggimageusa-com.20150623.gappssmtp.com";
 gifts.figis.com                 require_signed  gifts.figis.com;
 gillians.com                    require_signed  gillians.ccsend.com;
 girlscoutsla.org                require_signed  girlscoutsla.org;
 glassdoor.com                   require_signed  glassdoor.com;
 glassesusa.com                  require_signed  bronto.com;
 globalfinancegroup.com          require_signed  globalfinancegroup-com.20150623.gappssmtp.com;
 globalmasstransit.net           require_signed  cvent-planner.com;
+globaltranz.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 go.coachup.com                  require_signed  go.coachup.com;
 godaddy.com                     require_signed  godaddy.com;
 gofundme.com                    require_signed  "gofundme.com,email.gofundme.com";
 go.intervalworld.com            require_signed  go.intervalworld.com;
 go-jsb.com                      require_signed  kpn1210384.onmicrosoft.com;
 gokdm.com                       require_signed  gokdm.ccsend.com;
 gokhalemethod.com               require_signed  gokhalemethod.com;
+goldenstate.is                  require_signed  "goldenstate.is,goldenstate-is.20150623.gappssmtp.com";
+golfweek.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 google.com                      require_signed  google.com;
 googlemail.com                  require_signed  googlemail.com;
 goop.com                        require_signed  goop.com;
 gopac.org                       signed_black    icontactmail1.com;              // survey spam
 gophercentral.com               require_signed  gophercentral.com;
 gordoncompaniesinc.com          require_signed  gordoncompaniesinc.com;
 goto.arcadiapublishing.com      require_signed  goto.arcadiapublishing.com;
 gotowebinar.com                 require_signed  gotowebinar.com;
-govbrief.us                     require_signed  govbrief.us;
 gov-con.com                     require_signed  icontactmail2.com;
 govsubscriptions.michigan.gov   require_signed  govsubscriptions.michigan.gov;
 gpcc.com                        require_signed  gpcc.com;
 grabcad.com                     require_signed  grabcad.com;
 grandopera.org                  signed_white    grandopera.ccsend.com;          // some unsigned mail via sendlabs.com
 graphiccommunications.us        require_signed  graphiccommunications.onmicrosoft.com;
-graphisoft.com                  require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+graphisoft.com                  require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 greatebay.com                   require_signed  sendclubmail.com;
 greaterthanone.com              require_signed  greaterthanone.onmicrosoft.com;
 greatist.com                    require_signed  greatist.com;
 greatparentingshow.com          require_signed  ontramail.com;
 greenbiz.com                    require_signed  greenbiz.com;
 greenbuildingunited.org         require_signed  dvgbc365.onmicrosoft.com;
 greenforall.org                 require_signed  greenforall.org;
 greenpasture.org                require_signed  greenpasture.org;
-greenphillyblog.com             require_signed  "gmail.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+greenphillyblog.com             require_signed  "gmail.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 greensecurityllc.com            require_signed  netorgft1001345.onmicrosoft.com;
 greenvelope.com                 require_signed  greenvelope.com;
 greyhawk.com                    require_signed  "greyhawkna.onmicrosoft.com,*.ccsend.com";
 greystar.com                    require_signed  "greystar365.onmicrosoft.com,entrata.com";
-gridphilly.com                  require_signed  "gridphilly-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+gridphilly.com                  require_signed  "gridphilly-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+grindr.com                      require_signed  "google.com,grindr-com.20150623.gappssmtp.com";
 grizzly.com                     require_signed  grizzly.com;
 groove3.com                     require_signed  groove3.com;
+groupon.com                     require_signed  groupon.com;
 grove.co                        require_signed  grove.co;
 grundoon.net                    require_signed  grundoon.onmicrosoft.com;
 gsa-cms.com                     require_signed  gsa-cms.com;
 gsb.columbia.edu                require_signed  "columbiabusiness.onmicrosoft.com,icontactmail2.com";
 gtcsocial.com                   require_signed  gtcsocial.com;
-guidestar.org                   require_signed  guidestar.org;
+guidestar.org                   require_signed  "guidestar.org,guidestarusa.onmicrosoft.com,amazonses.com";
-gundogsupply.com                require_signed  "gundogsupply.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+gundogsupply.com                require_signed  "gundogsupply.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 gusto.com                       require_signed  gusto.com;
 h1.hilton.com                   require_signed  h1.hilton.com;
 h1.hiltonhhonors.com            require_signed  h1.hiltonhhonors.com;
 h1.hiltonhonors.com             require_signed  h1.hiltonhonors.com;
 habitatncc.org                  require_signed  habitatncc.ccsend.com;
 halfoffdeal.com                 require_signed  halfoffdeal.com;
 hallmarkmoviesnow.com           require_signed  "hallmarkmoviesnow.com,pmta.sailthru.com";
 halpernlevy.com                 require_signed  halpernandlevy.onmicrosoft.com;
+hanapinmarketing.com            require_signed  hanapinmarketing.com;
+happify.com                     require_signed  happify.com;
 harborfreight.com               require_signed  harborfreight-com.20150623.gappssmtp.com;
 harborfreightemail.com          require_signed  harborfreightemail.com;
 hardrockhotelsd.com             require_signed  zmaildirect.com;
 hardywindows.com                require_signed  hardywindows.onmicrosoft.com;
 harley-davidson.rsys2.com       require_signed  rsys2.com;
 harryanddavid-email.com         require_signed  harryanddavid-email.com;
 hartfordadmission.org           require_signed  hartfordadmission.org;
 harting.com                     require_signed  "mktroute.com,mktomail.com";
 harvestapp.com                  require_signed  harvestapp.com;
-harvestseasonalgrill.com        require_signed  "getvenga.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+harvestseasonalgrill.com        require_signed  "getvenga.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 hauptwerk.com                   require_signed  hauptwerk.com;
 havenadoptions.com              require_signed  havenadoptions-com.20150623.gappssmtp.com;
 hawkemedia.com                  require_signed  hawkemedia.com;
-hbham.com                       require_signed  hbham.com;
+hbanet.org                      require_signed  hbanet.org;
+hbham.com                       signed_white    hbham.com;                      // unsigned mail from their own mail server that fails strong spf
 hcconstructors.com              require_signed  pwcusa.ccsend.com;
 healthcarefinancenews.com       require_signed  healthcarefinancenews.com;
 healthcare.gov                  require_signed  healthcare.gov;
 healthcareinfosecurity.com      require_signed  healthcareinfosecurity.com;
 healthcareitnews.com            require_signed  healthcareitnews.com;
 henningers.com                  require_signed  icontactmail1.com;
 heritagebusiness.com            signed_white    "heritagebusiness.com,heritagebusiness.onmicrosoft.com,evolvedoffice.com";  // some missing dkim keys in dns
 hhglobal.com                    require_signed  hhglobal.com;
 hhgreggemail.com                require_signed  hhgreggemail.com;
 hhsportsandevents.com           require_signed  hersheyha.onmicrosoft.com;
-hicastsports.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+hicastsports.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-highimpact.com                  require_signed  "highimpact.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+highimpact.com                  require_signed  "highimpact.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 hightailmail.com                require_signed  "hightailmail.com,*.hubspotemail.net,*.hubspot.com";
 himssmedia.com                  require_signed  himssmedia.com;
 hired.com                       require_signed  hired.com;
 hive.com                        require_signed  "hive.com,hive-com.20150623.gappssmtp.com";
 hmc.edu                         require_signed  hmc2.onmicrosoft.com;
+hofstra.edu                     require_signed  "hofstra.edu,targetx.com,hofstra1edu.onmicrosoft.com";
 holosonics.com                  require_signed  holosonics.ccsend.com;
 holts.com                       signed_white    icontactmail1.com;              // some unsigned mail from their own web server with no reverse dns not listed in their spf record
 homeaway.com                    require_signed  homeaway.com;
 homedepot.com                   signed_white    homedepot.com;                  // some unsigned mail via salesforce from customer service
 home-mail.sophos.com            require_signed  home.sophos.com;
 hometalkmedia.com               require_signed  hometalkusa.ccsend.com;
 honeywell.com                   require_signed  honeywell.com;
 hootsuite.com                   require_signed  hootsuite.com;
 hospitalitydental.com           require_signed  hospitalitydental.ccsend.com;
 hotels.com                      require_signed  hotels.com;
+housecallpro.com                require_signed  housecallpro.com;
 houseofgeoscience.org           require_signed  "sendgrid.info,mailplus.nl";
 houzz.com                       signed_white    houzz.com;                      // some unsigned mail via salesforce
 hq.acm.org                      require_signed  acmhq.onmicrosoft.com;
 hsbc.com                        require_signed  hsbc.com;
-htallc.com                      require_signed  "smtpsendmail.com,smtp.com";
+htallc.com                      require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 hubs.com                        require_signed  hubs.com;
 hulumail.com                    require_signed  hulumail.com;
 hungryroot.com                  require_signed  "hungryroot.com,email.hungryroot.com";
 huntingpa.com                   require_signed  huntingpa.com;
 hvccpa.org                      require_signed  hvccpa-org.20150623.gappssmtp.com;
 hybris.com                      require_signed  myrandf.com;
 hyundaicustomerfeedback.com     require_signed  hyundaicustomerfeedback.com;
 hyundaimotors.com               require_signed  hyundaimotors.com;
 iamericaaction.org              signed_white    bounce.bluestatedigital.com;    // some unsigned via bluestatedigital as well
 ibotta.com                      require_signed  ibotta.com;
+id.apple.com                    require_signed  id.apple.com;
 idealprec.com                   require_signed  idealprec.ccsend.com;
 identity-morningstar.com        require_signed  identity-morningstar.com;
 identityprotection.norton.com   require_signed  identityprotection.norton.com;
-idsa.org                        require_signed  idsa.ccsend.com;
+idsa.org                        require_signed  "*.ccsend.com";
+idscreates.com                  require_signed  idscreates-com.20150623.gappssmtp.com;
+ids.ups.com                     require_signed  ids.ups.com;                    // unsigned mail should pass spf -all
 ieee.org                        require_signed  "ieee-org.20150623.gappssmtp.com,cmail19.com,cmail20.com,amazonses.com";  // some unsigned survey mail via confirmit.com that fails spf
 ientry.info                     require_signed  ientry.net;
 ifixit.com                      require_signed  ifixit.com;
 ifly.alaskaair.com              require_signed  ifly.alaskaair.com;
 ifm.com                         require_signed  ifm.com;
 imdb.com                        require_signed  imdb.com;
 imprintprojects.com             require_signed  imprintprojects.com;
 improvementscatalog-email.com   require_signed  improvementscatalog-email.com;
 imt-mach.com                    require_signed  imt-mach.com;
 inbound.com                     require_signed  inbound.com;
-inbound.efax.com                require_signed  inbound.efax.com;               // never signed, but must pass spf
+inbound.efax.com                require_signed  inbound.efax.com;               // unsigned mail should pass spf -all
 inbox.bissell.com               require_signed  inbox.bissell.com;
+independent.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 industrymarketingsolutions.com  require_signed  mail-202-169.rm0005.net;
 infinitytools.com               require_signed  "infinitytools.ccsend.com,remarkety.com";
 info1.networksolutions.com      require_signed  info1.networksolutions.com;
 info3.citibank.com              require_signed  info3.citibank.com;
 info4.citi.com                  require_signed  info4.citi.com;
 info5.accountonline.com         require_signed  info5.accountonline.com;
 info6.accountonline.com         require_signed  info6.accountonline.com;
 info6.citi.com                  require_signed  info6.citi.com;
 info.bitdefender.com            require_signed  info.bitdefender.com;
+info.cdw.com                    require_signed  info.cdw.com;
 info.citibank.com               require_signed  "citibank.com,info.citibank.com";
 info.citrixdelivers.com         require_signed  info.citrixdelivers.com;
 info.comenity.net               require_signed  info.comenity.net;
 info.cynopsis.com               require_signed  "info.cynopsis.com,mktdns.com";
+info.ebay.com                   require_signed  info.ebay.com;
 info.key.com                    require_signed  info.key.com;
 info.mountaincreek.com          require_signed  info.mountaincreek.com;
+info.ms.aa.com                  require_signed  info.ms.aa.com;
 info.prioritypass.com           require_signed  info.prioritypass.com;
 information.nature.com          require_signed  information.nature.com;
+info.sciex.com                  require_signed  info.sciex.com;
 info.stagnitomedia.com          require_signed  stagnito.cfmvmail.com;
 ingrammicro.com                 signed_white    "leadflight.net,pb-dynmktg.com";    // unsigned mail via pphosted, no spf record
 inhousejobalert.com             require_signed  inhousejobalert.com;
 inhousejobsalerts.com           require_signed  inhousejobsalerts.com;
 inklings.biz                    require_signed  inklings.biz;
 inmarket.com                    require_signed  "inmarket.com,*.hubspotemail.net";
 innovive.com                    require_signed  innovive-com.20150623.gappssmtp.com;
 inpower.ca                      require_signed  inpower-ca.20150623.gappssmtp.com;
 insideapple.apple.com           require_signed  insideapple.apple.com;
 insideradio.com                 require_signed  e2ma.net;
+inspirato.com                   require_signed  inspirato.com;
 inspire.pinterest.com           require_signed  inspire.pinterest.com;
 inspireschools.org              require_signed  inspireschools-org.20150623.gappssmtp.com;
 instamed.com                    require_signed  instamed.com;
 instoreaudionetwork.com         require_signed  instoreaudio.onmicrosoft.com;
 insurance.thehartford.com       require_signed  insurance.thehartford.com;
 intacct.com                     require_signed  intacct.com;
+interactive.wsj.com             require_signed  "interactive.wsj.com,wsj.com";
 interactone.com                 require_signed  "mx-senderer-02.com,mx-senderer-03.com";
 interior-specialties.com        signed_white    "appriver3651009419.onmicrosoft.com,smtpcorp.com";
+internetbrands.com              require_signed  internetbrands.com;
 intervalintl.com                require_signed  iilg.onmicrosoft.com;
 inthenewsonline.com             require_signed  "*.shared.hubspot.com";
 intuit.com                      require_signed  intuit.com;
-intuitsolutions.net             require_signed  "affinitylive.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+intuitsolutions.net             require_signed  "affinitylive.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 invidtech.com                   require_signed  "auth.ccsend.com,zcsend.net";
 invista.com                     signed_white    "invista.com,kochind.onmicrosoft.com";  // some broken signatures from microsoft via pphosted
 invntree.com                    require_signed  invntree.com;
 ipipeline.com                   require_signed  ipipeline.onmicrosoft.com;
 ipushtech.com                   require_signed  pushtech.onmicrosoft.com;
 iriworldwide.com                require_signed  iriworldwide.com;
-iskysoft.com                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+iskysoft.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 ismgcorp.com                    require_signed  ismgcorp.com;
 ispringmail.com                 require_signed  ispringmail.com;
 issuumail.com                   require_signed  issuumail.com;
 ithirings.com                   require_signed  messaging-master.net;
 iupdate.dnb.com                 require_signed  dnb.com;
 ixactcontact.com                require_signed  ixactcontact.com;
-jackseeds.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+jackseeds.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 jackthreads.com                 require_signed  jackthreads.com;
 jacpac.org                      require_signed  jacpac.ccsend.com;
 jakprints.com                   require_signed  "jakprints.com,jakprints-com.20150623";
 jameco.com                      require_signed  jameco.com;
 jamestaylor.com                 require_signed  sh01.musvc.com;
 jamf.com                        require_signed  "jamfsw.onmicrosoft.com,jamf.com";
 jcresorts.com                   require_signed  jcresorts.com;
 jdrf.org                        signed_white    jdrf.org;                       // some unsigned mail via convio not included in their spf record
 jenjudge.com                    require_signed  emlr2.com;
+jerrysartarama.com              require_signed  jerrysartarama.com;
 jet.com                         signed_white    jet.com;                        // some unsigned mail from mailchimp that fails spf
-jewelscent.com                  require_signed  delivery.klaviyomail.com;
+jewelscent.com                  require_signed  "*.klaviyomail.com";
 jewishphilly.org                require_signed  "aweber.com,auth.ccsend.com,jewishphilly.ccsend.com,jewishphilly-org.20150623.gappssmtp.com";
 jhu.edu                         signed_white    "e2ma.net,publicaster.com,bsftransmit7.com,armssoftware.com";     // possibly other signers
 jibjab.com                      require_signed  "jibjab.com,recurly.com";
 jimjohnson4governor.com         require_signed  bounce.bluestatedigital.com;
 jkj.com                         require_signed  "jkj.com,jkji.onmicrosoft.com";
 jobrapidoalert.com              require_signed  jobrapidoalert.com;
 jobs2careers.com                require_signed  jobs2careers.com;
 jobs.cl.alerted.org             require_signed  cl.alerted.org;
 jobs.fbg.alerted.org            require_signed  fbg.alerted.org;
 jobs.mpr.alerted.org            require_signed  mpr.alerted.org;
-johnandkiras.com                require_signed  johnandkiras.com;
+johnandkiras.com                require_signed  "johnandkiras.com,commercev3.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 johncanningco.com               require_signed  spsend.com;
 johnmaxwell.com                 require_signed  email.johnmaxwell.com;
+johnstonortholab.com            require_signed  johnstonortholab.com;
 joshshapiro.org                 signed_white    bounce.bluestatedigital.com;
 jstor.org                       require_signed  jstor.org;
 judsonsart.com                  require_signed  icontactmail3.com;
+jusmisiones.gov.ar              unsigned_black  jusmisiones.gov.ar;
 justice.org                     require_signed  justice.org;
 kaarmadealer.com                require_signed  kaarmadealer.com;
 kaiserhealthnews.org            require_signed  kff.org;
 kaleidescape.com                require_signed  kaleidescape.com;
 kamalaharris.org                signed_white    kamalaharris.org;
 kantar.com                      require_signed  "ktglbuc.onmicrosoft.com,icontactmail6.com";
 kantarmedia.com                 require_signed  "kantarmedia.com,ktglbuc.onmicrosoft.com,icontactmail3.com,icontactmail6.com";
-katzmedia.com                   require_signed  "iheartmedia.onmicrosoft.com,clearchannel.com,iheartmedia.com";
+katzmedia.com                   require_signed  "katzmedia.com,iheartmedia.onmicrosoft.com,clearchannel.com,iheartmedia.com";
 kaydaly.com                     require_signed  "kaydaly.com,bluehornet.com";
 kbkg.net                        require_signed  kbkg.net;
 kcrw.org                        signed_white    "kcrw-org.20150623.gappssmtp.com,*.hubspot.com";    // unsigned from traffic@
 kennedy-center.org              require_signed  kennedy-center.org;
-kep.com                         require_signed  kep.ccsend.com;
+kep.com                         require_signed  "kep.com,*.ccsend.com";
 kerio.com                       require_signed  kerio.com;
 keswicktheatre.com              signed_white    keswicktheatre.ccsend.com;      // some unsigned mail from their own servers
 keystoneline.com                require_signed  keystoneline.ccsend.com;
 kftv.com                        require_signed  kftv.com;
 kik.com                         require_signed  action.kik.com;
-kingarthurflour.com             require_signed  kingarthurflour.com;
+kilo943.com                     require_signed  kilo943-com.20150623.gappssmtp.com;
+kingarthurflour.com             signed_white    kingarthurflour.com;            // some unsigned mail via salesforce
 kingscollegeinfo.org            require_signed  kingscollegeinfo.org;
+kinsmangarden.com               require_signed  "commercev3.com,icontactmail2.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 kmnewsletters.com               require_signed  kmnewsletters.com;
 knoll.com                       require_signed  knoll.com;
-knotandrope.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+knotandrope.com                 require_signed  "sendgrid.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 knowledge.onlinecompliancepanel.net require_signed  knowledge.onlinecompliancepanel.net;
 kofc.org                        signed_white    www-kofc.ccsend.com;            // some unsigned mail from their own mail server not listed in their spf record
 komenphiladelphia.org           require_signed  komenphiladelphia.org;
+kovr.com                        signed_white    cbs.onmicrosoft.com;            // unsigned mail via pphosted
+kpbs.org                        require_signed  "kpbs.org,spsend.com";
 kqllc01.com                     require_signed  kqllc01.com;
-kremp.com                       signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";    // some other unsigned mail, no spf record
+krem.com                        require_signed  tegna.onmicrosoft.com;
+kremp.com                       signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";    // some other unsigned mail, no spf record
+ksgcc.com                       require_signed  "ksgcc.com,ksgcc.onmicrosoft.com";
 kw.com                          require_signed  kw.com;
 labcorp.com                     require_signed  labcorp.com;
 laboratorytesting.com           require_signed  laboratorytesting.com;
+lacitylimo.com                  require_signed  "sendgrid.info,email-od.com,Citytransinc.onmicrosoft.com";
 lacity.org                      require_signed  lacity-org.20150623.gappssmtp.com;
 ladygrace.com                   require_signed  ladygrace.com;
 lakearrowheadchamber.com        signed_white    lakearrowhead.ccsend.com;       // some unsigned mail via unifiedlayer.com
 landarq.com                     require_signed  "landarq.com,landarq-com.20150623.gappssmtp.com";
 lanierlawfirm.com               require_signed  "cmail19.com,cmail20.com";
 laopera.org                     require_signed  "laopera.org,laopera.onmicrosoft.com";
-largeformatreview.com           require_signed  "amazonses.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+largeformatreview.com           require_signed  "amazonses.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 larryjohnsonspeaker.com         require_signed  priorityoneemail.com;
 latest.newsmax.com              require_signed  latest.newsmax.com;
+latimes.com                     require_signed  "latimes.com,nl.latimes.com";
 latinworks.com                  require_signed  latinworks.onmicrosoft.com;
 law360.com                      require_signed  "law360.com,mailings-alt.law360.com";
 laweekly-insider.com            require_signed  laweekly-insider.com;
-lawline.com                     require_signed  icontactmail1.com;
+lawline.com                     require_signed  "*.lawline.com,icontactmail1.com,*.hubspotemail.net";
 lawreviewcle.com                require_signed  lawreviewcle.com;
 law.stanford.edu                require_signed  "cmail19.com,cmail20.com";
+lawyers.com                     require_signed  lawyers.com;
 lawyertechinfo.com              require_signed  "icontactmail2.com,icontactmail6.com";
 lazorlaw.com                    require_signed  johnlazor.onmicrosoft.com;
 lbccc.org                       require_signed  "lbccc.ccsend.com,www-lbccc.ccsend.com";
 lcius.com                       require_signed  lcius.onmicrosoft.com;
 leapinglizardssmyrna.com        require_signed  em.secureserver.net;
 ledbury.com                     require_signed  ledbury.com;
 ledgerwallet.com                require_signed  smtp.groovehq.com;
+lee.org                         require_signed  lee.org;                        // dmarc
 leerburg.com                    require_signed  amazonses.com;
 leeshoagiehouse.com             require_signed  leeshoagiehouse.ccsend.com;
 lefbc.com                       require_signed  lefbc.com;
 legalnewsupdate.com             require_signed  legalnewsupdate.ccsend.com;
 legrand.us                      require_signed  grpleg.onmicrosoft.com;
 lehighvalleychamber.org         require_signed  lehighvalleychamber.ccsend.com;
 levinperconti.com               require_signed  levinperconti.onmicrosoft.com;
+lexingtonmfg.com                require_signed  lexingtonmfg.com;
 lexisnexis.com                  require_signed  lexisnexis.com;
 lexmachina.com                  require_signed  lexmachina.com;
 lexusenform.com                 require_signed  lexusenform.com;
 lfw-media.com                   require_signed  lfw-media.com;
 liberty247.net                  require_signed  liberty247.net;
 libertyheadlines.com            require_signed  libertyheadlines.com;
 libertymutual.com               signed_white    libertymutual.com;              // some unsigned mail from their own servers
 lifeandstylemag.com             require_signed  lifeandstylemag.com;
 lifelock.com                    require_signed  lifelock.com;
 lightyearmg.com                 require_signed  lightyearmg-com.20150623.gappssmtp.com;
+liketoknow.it                   require_signed  liketoknow.it;
 lillarogers.com                 require_signed  lillarogers.ccsend.com;
 lindenmeyr.com                  require_signed  lindenmeyrmunroe.ccsend.com;
 linkedin.com                    require_signed  linkedin.com;
 linquest.com                    require_signed  linquest.onmicrosoft.com;
+linuxjournal.com                require_signed  "linuxjournal.com,cmail19.com,cmail20.com";
 linuxjournalservices.com        require_signed  linuxjournalservices.com;
-liquidityservices.com           require_signed  mandrillapp.com;
+liquidityservices.com           require_signed  "mandrillapp.com,mailchimpapp.net";
 liquor.com                      require_signed  liquor.com;
 listedby.com                    require_signed  listedby.com;
 listeneremail.net               require_signed  listeneremail.net;
 list.moveon.org                 require_signed  "list.moveon.org,moveon.org";
+lists.samba.org                 require_signed  lists.samba.org;
 lists.trialsmith.com            require_signed  lists.trialsmith.com            // unsigned mail but it passes spf
-littsquality.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+littsquality.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 liveperson.com                  require_signed  liveperson.com;
 llbgroup.com                    require_signed  "llbgroup.com,llbgrouptechsolutions.onmicrosoft.com";
 llnl.gov                        require_signed  doellnl.onmicrosoft.com;
 loanservicing.bankofamerica.com require_signed  loanservicing.bankofamerica.com;
 localjobservice.com             require_signed  localjobservice.com;
 logees.com                      signed_white    "logees.com,logees.ccsend.com"; // some unsigned mail from their own servers that fails spf, broken sigs from their own server
+login.gov                       require_signed  login.gov;
 logistick.com                   require_signed  logistick.com;
+logmein.com                     require_signed  logmein.com;
 logomark.com                    require_signed  logomark.onmicrosoft.com;
 longbeachhonda.com              require_signed  "xtime.com,dealersocket.com";
 loseit.com                      require_signed  loseit.com;
 lovethe88.com                   require_signed  lovethe88-com.20150623.gappssmtp.com;
 loweekly.com                    require_signed  loweekly.com;
 loyaltyalliance.com             require_signed  "loyaltyalliance.com,mx-senderer-02.com,mx-senderer-03.com";
 loyalty.bloomingdales.com       require_signed  loyalty.bloomingdales.com;
-loyalty.ms.aa.com               require_signed  loyalty.ms.aa.com;
+loyalty.ms.aa.com               signed_white    loyalty.ms.aa.com;              // they send some unsigned mail
-lpl.com                         require_signed  lpl.com;
+lpl.com                         require_signed  "lpl.com,email01.fmgsuite.com";
 lqa.com                         require_signed  cp20.com;
 l.soma.com                      require_signed  l.soma.com;
+lsu.edu                         require_signed  lsu.edu;                        // unsigned, but should pass strong spf
 ltsc.ucsb.edu                   require_signed  ltsc.ucsb.edu;
 lucidchart.com                  require_signed  lucidchart.com;
 luv.southwest.com               require_signed  luv.southwest.com;
 l.whitehouseblackmarket.com     require_signed  l.whitehouseblackmarket.com;
+lycra.com                       require_signed  lycra.onmicrosoft.com;
 lydiasuniforms.com              signed_white    lydiasuniforms.com;             // some unsigned mail from their own servers
 lyftmail.com                    require_signed  lyftmail.com;
 lynda.com                       require_signed  lynda.com;
 m1.eml.beau-coup.com            require_signed  m1.eml.beau-coup.com;
 maadvisor.com                   require_signed  cvent-planner.com;
 maakenterprises.com             require_signed  maakenterprises.com;
+macdonaldmedia.com              require_signed  macdonaldmedia.onmicrosoft.com;
 machinezone.com                 require_signed  machinezone.com;
 macsales.com                    signed_white    macsales.com;                   // some unsigned mail via salesforce
-magicjack.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+magicjack.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 magnaplate.com                  require_signed  magnaplate.com;
 maground.com                    require_signed  "*.acemsa4.com";
 mag.southernliving.com          require_signed  mag.southernliving.com;
 mail-1.bizjournals.com          require_signed  bizjournals.com;
 mail1.wellsfargo.com            require_signed  mail1.wellsfargo.com;
 mail2.gofarrewards.wellsfargo.com require_signed  mail2.gofarrewards.wellsfargo.com;
 mail2.wellsfargo.com            require_signed  mail2.wellsfargo.com;
 mail3.ams-cc.com                require_signed  ams-cc.com;
 mail5.avvo.com                  require_signed  mail5.avvo.com;
 mail7.creditkarma.com           require_signed  mail.creditkarma.com;
-mail.accounts.autodesk.com      require_signed  email.accounts.autodesk.com;
+mail.accounts.autodesk.com      require_signed  "email.accounts.autodesk.com,identity.autodesk.com";
 mail.authorize.net              require_signed  mail.authorize.net;
-mail.barnesandnoble.com         require_signed  mail.barnesandnoble.com;
+mail.barnesandnoble.com         require_signed  "mail.barnesandnoble.com,bounceexchange.com";
 mail.bloombergbusiness.com      require_signed  mail.bloombergbusiness.com;
 mail.bonefishgrill.com          require_signed  mail.bonefishgrill.com;
 mail.bouqs.com                  require_signed  mail.bouqs.com;
 mail.brylanehome.com            require_signed  mail.brylanehome.com;
 mailcenter.usaa.com             require_signed  usaa.com;
 mail.change.org                 require_signed  mail.change.org;
 mailchimp.com                   require_signed  mailchimp.com;
 mail.citipricerewind.com        require_signed  mail.citipricerewind.com;       // stupid banks with multiple branding;
 mail.crateandbarrel.com         require_signed  mail.crateandbarrel.com;
+mail.digiday.com                require_signed  mail.digiday.com;
 mail.disneydestinations.com     require_signed  mail.disneydestinations.com;
-mail.efax.com                   require_signed  mail.efax.com;                  // never signed, but must pass spf
+mail.efax.com                   require_signed  mail.efax.com;                  // unsigned mail should pass spf ~all
 mail.elsevier.com               require_signed  mail.elsevier.com;
 mailer.birchbox.com             require_signed  mailer.birchbox.com;
 mailer.box.com                  require_signed  box.com;
 mailer.cheaptickets.com         require_signed  mailer.cheaptickets.com;
 mailer.netflix.com              require_signed  netflix.com;
 mail.glassdoor.com              require_signed  mail.glassdoor.com;
 mail.goodreads.com              require_signed  goodreads.com;
 mail.hbonow.com                 require_signed  mail.hbonow.com;
 mailhost.docuhost-net.com       require_signed  mailhost.docuhost-net.com;
 mail.hotels.com                 require_signed  mail.hotels.com;
+mail.idnotify.com               require_signed  mail.idnotify.com;
 mail.imparture.us               require_signed  mail.imparture.us;
 mail.instagram.com              require_signed  mail.instagram.com;
 mail.lexisnexis.com             require_signed  mail.lexisnexis.com;
+mail.loft.com                   require_signed  mail.loft.com;
 mail.lotsahelpinghands.com      require_signed  mail.lotsahelpinghands.com;
 mail.medscape.com               require_signed  mail.medscape.com;
 mail.mlblists.com               require_signed  mail.mlblists.com;
+mail.ms.aa.com                  require_signed  mail.ms.aa.com;
 mail.onedrive.com               require_signed  mail.onedrive.com;
 mail.patient-message.com        require_signed  mail.patient-message.com;
 mail.paypal.com                 require_signed  mail.paypal.com;
 mail.pbteen.com                 require_signed  mail.pbteen.com;
 mail.pictureframes.com          require_signed  mail.pictureframes.com;
 mailva.evite.com                require_signed  mailva.evite.com;
 mail.vividseats.com             require_signed  mail.vividseats.com;
 mail.vresp.com                  require_signed  vresp.com;
 mail.westelm.com                require_signed  mail.westelm.com;
 mail.whitehouse.gov             require_signed  mail.whitehouse.gov;
+mail.yelp.com                   require_signed  yelp.com;
 mail.zillow.com                 require_signed  mail.zillow.com;
 mainewhitewater.com             require_signed  northcountryrivers.ccsend.com;
+mainfreightusa.com              require_signed  mainfreightusa.com;
 maintain.se                     require_signed  minutemailer.com;
 makinmusic.com                  require_signed  makinmusic.ccsend.com;
 malwarebytes.com                require_signed  malwarebytes.com;
 mannapa.org                     require_signed  mannapa.ccsend.com;
 manufacturingonline.org         require_signed  manufacturingonline.ccsend.com;
 mapmywalk.underarmour.com       require_signed  mapmywalk.underarmour.com;
 mariahmarketing.com             require_signed  mariahmarketing-com.20150623.gappssmtp.com;
 marinemax.com                   require_signed  marinemax.com;
 marinsoftware.com               require_signed  marinsoftware.com;
-markbric.com                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+markbric.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 markcustom.com                  require_signed  ipengines.net;                  // seems to be mediasupply client
+marketing.discountfilterstore.com require_signed  marketing.discountfilterstore.com;
 marketing.ipsy.com              require_signed  marketing.ipsy.com;
 marketing.qdoba.com             require_signed  marketing.qdoba.com;
 marketplace.amazon.ca           require_signed  amazon.ca;
 marketplace.amazon.com          require_signed  amazon.com;
 marquiscapemay.com              require_signed  "marquiscapemay.onmicrosoft.com,auth.ccsend.com";
 martindalemail.com              require_signed  martindalemail.com;
 martindalenolo.com              require_signed  "martindalenolo.com,lawyers.com";
 marymorrissey.com               require_signed  marymorrissey.com;
 mastrocomm.com                  require_signed  twisteddune.ccsend.com;
 matadornetwork.com              require_signed  matadornetwork.com;
+match-cap.com                   require_signed  match-cap-com.20150623.gappssmtp.com;
 matildajaneclothing-email.com   require_signed  matildajaneclothing-email.com;
-matterhackers.com               require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+matterhackers.com               require_signed  "e1.niche.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 maxpedition.com                 require_signed  icontactmail1.com;
 mayo.edu                        signed_white    mayoclinic.com;                 // some unsigned via blackbaud (mailing list?), no spf record
 mcfinc.com                      require_signed  "mortgage-email.com,mcfinc-com.20150623.gappssmtp.com";
 mcmorrowreports.com             require_signed  mcmorrowreport.ccsend.com;
 mcnichols.com                   require_signed  "mcnichols-com.20150623.gappssmtp.com,bronto.com";
 meainfo.org                     require_signed  meainfo.org;
 media-blasters.com              require_signed  media-blasters-com.20150623.gappssmtp.com;
 mediabrains.com                 require_signed  mediabrains.com;
 mediaexperts.com                require_signed  mediaexpert.onmicrosoft.com;
 media.ieee.org                  require_signed  media.ieee.org;
+mediapost.com                   require_signed  mediapost.com;
 medium.com                      require_signed  medium.com;
-medjet.com                      require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+medjet.com                      require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+mednet.ucla.edu                 require_signed  "uclahealth.ccsend.com,uclahs.onmicrosoft.com";
 medquestltd.com                 signed_white    medquest.ccsend.com;            // some unsigned mail from their own servers
 medstatix.com                   require_signed  medstatix.com;
 meetup.com                      require_signed  meetup.com;
 meltwaterpress.com              require_signed  meltwaterpress.com;
 member.americanexpress.com      require_signed  member.americanexpress.com;
 menard.messages1.com            require_signed  menard.messages1.com;
 mentor-protege.net              require_signed  1pointemail.net;
 meraki.net                      require_signed  meraki.net;
 merchant.bankofamerica.com      require_signed  merchant.bankofamerica.com;
 meredith.com                    require_signed  meredith.com;
-merrickbank.com                 require_signed  smtpsendmail.com;
+merrickbank.com                 require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 message.bbt.com                 require_signed  message.bbt.com;
 message.fedex.com               require_signed  message.fedex.com;
 message.merrilledge.com         require_signed  message.merrilledge.com;
 messages.autotrader.com         require_signed  messages.autotrader.com;
 messages.cancer.org             require_signed  messages.cancer.org;
 message.scholastic.com          require_signed  message.scholastic.com;
 messages.clippers.com           require_signed  clippers.com;
 messages.cutco.com              require_signed  messages.cutco.com;
 message.sema.org                require_signed  message.sema.org;
+messages.frame.io               require_signed  messages.frame.io;
 messages.globalindustrial.com   require_signed  messages.globalindustrial.com;
 messages.homeaway.com           require_signed  messages.homeaway.com;
 messages.kbb.com                require_signed  messages.kbb.com;
 messages.medicinenet.com        require_signed  messages.medicinenet.com;
+messages.squareup.com           require_signed  "messages.squareup.com,amazonses.com";
 messages.webmd.com              require_signed  messages.webmd.com;
 message.wine.com                require_signed  message.wine.com;
+messaging.squareup.com          require_signed  "messaging.squareup.com,amazonses.com";
 messaging.usnews.com            require_signed  messaging.usnews.com;
+messaging.yelp.com              require_signed  yelp.com;
 messaging.zoosk.com             require_signed  messaging.zoosk.com;
 metroexhibits.com               require_signed  metroexhibits.com;
 metuchensportsplex.com          require_signed  rockvillesports.ccsend.com;
 mfp.underarmour.com             require_signed  mfp.underarmour.com;
+mg.hadco-metal.com              signed_white    mg.hadco-metal.com;             // unsigned via impactia.com
 mgmresorts.com                  require_signed  mgmresorts.com;
 mg.starbucks.com                require_signed  mg.starbucks.com;
 mholland.com                    require_signed  mhollandco.onmicrosoft.com;
 mic.com                         require_signed  mic.com;
 michaelkorsemail.com            require_signed  michaelkorsemail.com;
+microcenterinsider.com          require_signed  microcenterinsider.com;
 microsoft.com                   require_signed  microsoft.com;
 microsoftonline.com             require_signed  microsoftonline.com;
 midjerseychamber.org            require_signed  "*.ccsend.com";
 mileageplusshoppingnews.com     require_signed  mileageplusshoppingnews.com;
 mindbodygreen.com               require_signed  mindbodygreen.com;
 mindvalley.com                  require_signed  appmail.mindvalley.com;
 minico.com                      require_signed  criticalimpactinc.com;
 minime.nsta.org                 require_signed  minime.nsta.org;
 minnesotavikingsemail.com       require_signed  minnesotavikingsemail.com;
 miraclesuit.com                 require_signed  miraclesuit.com;
+mlb.com                         require_signed  majorleaguebaseball.onmicrosoft.com;
 ml.com                          require_signed  ct-mail.ml.com;
 mlivenyc.com                    require_signed  cvent-planner.com;
 m.mail.coursera.org             require_signed  m.mail.coursera.org;
 mmsonline.com                   require_signed  mmsonline.com;
 mms-updates.com                 require_signed  mms-updates.com;
+moasis.com                      require_signed  moasis-com.20150623.gappssmtp.com;
 mobileair.com                   require_signed  tiogahvac.onmicrosoft.com;
 mobiletechinc.com               require_signed  mobiletechinc.onmicrosoft.com;
 mobivity.com                    require_signed  mobivity.com;
-mobvious.media                  require_signed  mobvious.media;
+mobvious.media                  require_signed  "mobvious.media,mailchimpapp.net";
 modernmsg.com                   require_signed  "modernmsg.com,delivery.customeriomail.com";
 moes.com                        require_signed  email.punchh.com;
 momentumdash.com                require_signed  momentumdash.com;
-momentummgt.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+momentummgt.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 momscleanairforce.org           require_signed  server8839.e-activist.com;
 monotype.com                    require_signed  monotype.com;
 monster.com                     signed_white    monster.com;                    // some unsigned mail via mailsorter.be.tmpw.net;
 monsterequip.com                require_signed  icontactmail6.com;
 monsterscooterparts.com         require_signed  monsterscooterparts.com;
 morning7.theskimm.com           require_signed  morning7.theskimm.com;
 morrishabitat.org               require_signed  morrishabitat.ccsend.com;
 mortgagebankamerica.com         require_signed  emarketfocus.com;
 mosacks.com                     require_signed  mg.mosacks.com;
 mosaic.buzz                     require_signed  mosaic728.onmicrosoft.com;
-movavi.com                      require_signed  "mandrillapp.com,movavi.com";
+movavi.com                      require_signed  "mandrillapp.com,mailchimpapp.net,movavi.com";
 moveon.org                      require_signed  list.moveon.org;
 movies.fandango.com             require_signed  movies.fandango.com;
 movies.fandangonow.com          require_signed  movies.fandangonow.com;
 mp1.tripadvisor.com             require_signed  mp1.tripadvisor.com;
 mp.fitbit.com                   require_signed  mp.fitbit.com;
 mpma.net                        require_signed  mpma.ccsend.com;
-mrca.org                        require_signed  "smtpsendmail.com,smtp.com";
+mrca.org                        require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 mrrainbowcarpet.com             require_signed  yahoo.com;
 mrtireservice.info              require_signed  mrtireservice.info;
 mrtireservices.com              require_signed  "mrtireservices.com,mrtireservice.info";
 ms5.matildajaneclothing.com     require_signed  ms5.matildajaneclothing.com;
 mscando.org                     require_signed  mscando.ccsend.com;
 msmtvsales.com                  require_signed  iheartmedia.onmicrosoft.com;
 m.taxslayer.com                 require_signed  m.taxslayer.com;
 mtb.com                         require_signed  mtb.com;
 mtbopinions.com                 require_signed  mtbopinions.com;
 muckfestms.com                  require_signed  muckfestms.com;
-multibriefs.com                 require_signed  multibriefs.com;
+multibriefs.com                 signed_white    multibriefs.com;                // some unsigned mail via mimecast
 murphy4nj.com                   require_signed  "murphy4nj-com.20150623.gappssmtp.com,bounce.bluestatedigital.com";
 murphyforflorida.com            signed_white    bounce.bluestatedigital.com;
-musicacademy.org                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+musicacademy.org                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-musictoday.com                  require_signed  mg.musictoday.com;
+musictoday.com                  require_signed  "mg.musictoday.com,musictoday.com";
 musictogether.com               signed_white    musictogether.ccsend.com;       // some unsigned mail via mail.musictogether.com;
 mvsend.com                      require_signed  mvsend.com;
 mxtoolbox.com                   require_signed  mxtoolbox.com;
+myamextravel.com                require_signed  myamextravel.com;
+my.ba.com                       require_signed  my.ba.com;
+mybbb.org                       require_signed  "mybbb.org,auth.ccsend.com";
+mycase.com                      signed_white    mycase.com;                     // some unsigned mail from salesforce fails strong spf
+my.com                          unsigned_black  my.com;
+my.containerstore.com           require_signed  my.containerstore.com;
 myddi.com                       require_signed  myddi.com;
 myemma.com                      require_signed  myemma.com;
 my.erau.edu                     require_signed  myerauedu.onmicrosoft.com;
 myfinancialbodyguard.com        require_signed  myfinancialbodyguard-com.20150623.gappssmtp.com;
 myfitnesspal.com                require_signed  myfitnesspal.com;
 myiclubonline.com               require_signed  amazonses.com;
 myicontickets.com               require_signed  infusionmail.com;
 mymaryandmartha.com             require_signed  mymaryandmartha.com;
 my.orbitz.com                   require_signed  my.orbitz.com;
 myperfectresume.com             require_signed  myperfectresume.com;
-myphillypark.org                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+myphillypark.org                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 mypromosupport.com              require_signed  mypromosupport.com;
 myrandf.com                     require_signed  myrandf.com;
 myschoolemails.com              require_signed  myschoolemails.com;
+my.store-emails.com             require_signed  my.store-emails.com;
 mystubhub.com                   require_signed  mystubhub.com;
 na.email.aa.com                 require_signed  na.email.aa.com;
 nagr.org                        require_signed  nagr.org;
 nailgundepot.com                require_signed  "nailgundepot.com,auth.ccsend.com";
 nailiteinc.com                  require_signed  nailiteinc.ccsend.com;
+namecheap.com                   require_signed  namecheap.com;
 narvar.com                      require_signed  narvar.com;
 nationalgunrights.org           require_signed  nationalgunrights.org;
 nationallawfoundation.com       require_signed  nationallawfoundation.com;
-nationformarriage.org           require_signed  "nationformarriage.org,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";          // needs spf for wrong keys from bluehornet
+nationformarriage.org           require_signed  "nationformarriage.org,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";          // needs spf for wrong keys from bluehornet
 natlmail.com                    require_signed  nationalmailmarketing.onmicrosoft.com;
-naturalinsight.com              signed_white    naturalinsight.onmicrosoft.com; // some unsigned mail from salesforce
+naturalinsight.com              signed_white    naturalinsight.onmicrosoft.com; // some unsigned mail via salesforce
+nature.com                      require_signed  nature.com;
 nature.org                      require_signed  "nature.org,mta-bbcspool.convio.net";
 navigant.com                    require_signed  navigant.com;
 navigantpace.com                require_signed  navigantpace.com;
 nazarethacademyhs.org           require_signed  nazarethacademyhs.onmicrosoft.com;  // seems to be thomasjpaul.com correspondent
-nazdar.com                      require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+nazdar.com                      require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+nbaa.org                        require_signed  nbaa.org;
+nbcuni.com                      require_signed  "nbcuni.onmicrosoft.com,e2ma.net";  // some unsigned mail via pphosted should pass strong spf
 nbstoremail.newbalance.com      require_signed  nbstoremail.newbalance.com;
+nccmedia.com                    require_signed  "nccmedia.com,nccmedia.onmicrosoft.com,spotcable.ccsend.com";    // unsigned mail should pass spf -all, some signed via cc
 nccn.org                        require_signed  cvent-planner.com;
 nclgs.com                       require_signed  "nclgs.onmicrosoft.com,auth.ccsend.com";
 nd.edu                          require_signed  "nd.edu,imodules.com";
 ndia.org                        signed_white    mmsend.com;                     // some unsigned mail directly from ndia.org
 nea.org                         require_signed  actionnetwork.org;
+neato.com                       signed_white    neato-com.20150623.gappssmtp.com;   // unsigned mail from their own mail servers fails strong spf
 nedm.asus.com                   require_signed  nedm.asus.com;
 neilsonmarketing.com            require_signed  icontactmail2.com;
 nejm.org                        require_signed  nejm.org;
 nemanet.org                     signed_white    nemanet.ccsend.com;             // some unsigned mail via kintera.com
 netgear.com                     require_signed  netgear.com;
 networkafterwork.com            require_signed  networkafterwork.com;
 neuropathytreatmentgroup.com    require_signed  neuropathytreatmentgroup.com;
+newarkrecycling.com             require_signed  newarkrecycling.com;
 newbay-media.com                require_signed  "newbay.cfmvmail.com,newbay2.cfmvmail.com";
 new.itunes.com                  require_signed  new.itunes.com;
 newletters.grccompliances.com   require_signed  newletters.grccompliances.com;
 news.alibris.com                require_signed  news.alibris.com;
 newsamerica.com                 require_signed  newsamerica-com.20150623.gappssmtp.com;
+news.bisnow.com                 require_signed  news.bisnow.com;
 news.bodybuilding.com           require_signed  news.bodybuilding.com;
 news.classiccarrestorationclub.com require_signed  news.classiccarrestorationclub.com;
 news.conservativeintel.com      require_signed  news.conservativeintel.com;
 news.dbr.com                    require_signed  cecollect.com;
 news.gucci.com                  require_signed  "news.gucci.com,contactlab.it";
 news.hickoryfarms.com           require_signed  news.hickoryfarms.com;
 newsletter.247sports.com        require_signed  newsletter.247sports.com;
 newsletter.gearbest.com         require_signed  newsletter.gearbest.com;
 newsletter.movietickets.email   require_signed  newsletter.movietickets.email;
 newsletter.newyorker.com        require_signed  newsletter.newyorker.com;
+newsletter.pilotflyingj.com     require_signed  newsletter.pilotflyingj.com;
 newsletter.purposedriven.com    require_signed  newsletter.purposedriven.com;
 newsletters.care2.com           require_signed  care2.com;
 newsletter.selectquote.com      require_signed  newsletter.selectquote.com;
 newsletter.springer.com         require_signed  newsletter.springer.com;
 newsletter.tinder.com           require_signed  newsletter.tinder.com;
 news.modernmedicine.com         require_signed  news.modernmedicine.com;
 news.monoprice.com              require_signed  news.monoprice.com;
 news.moo.com                    require_signed  news.moo.com;
 news.pcm.com                    require_signed  news.pcm.com;
 news.pier1.com                  require_signed  news.pier1.com;
+news.purina.com                 require_signed  news.purina.com;
 news-rodalesorganiclife.com     require_signed  news-rodalesorganiclife.com;
 news.shiftdailynews.com         require_signed  news.shiftdailynews.com;
 news.southcommmail.com          require_signed  news.southcommmail.com;         // needs spf for broken signatures
 news.subaru.com                 require_signed  news.subaru.com;
 news.taylormadegolf.com         require_signed  news.taylormadegolf.com;
 nextdayflyers.com               require_signed  nextdayflyers.com;
 nfib.org                        require_signed  nfib.org;
 nfibweekly.bulletinmedia.com    require_signed  bulletinmedia.com;
 nice.com                        require_signed  nice.com;
 nickeygregory.com               require_signed  nickeygregory-com.20150623.gappssmtp.com;
-nielsen-email.com               require_signed nielsen-email.com;
+nielsen-email.com               require_signed  nielsen-email.com;
 nisolo.com                      require_signed  nisolo.com;
 njbiz.com                       require_signed  "journalpub1.onmicrosoft.com,njbiz.com";
 njsba.com                       signed_white    "njsba.com,bluehornet.com";     // some broken signatures from bluehornet
-nlmdlr.com                      require_signed  pool01.imakenews.net;
+nl.neuralit.com                 require_signed  nl.neuralit.com;
 nmajh.org                       require_signed  nmajh.ccsend.com;
 nmk.printegra.com               require_signed  nmk.printegra.com;
+nmss.org                        require_signed  "muckfestms.com,mta-bbcspool.convio.net";
 noozhawk.com                    require_signed  noozhawk.com;
 nordstrom.com                   require_signed  "nordstrom.com,amazonses.com";
 noreply1.ebay.com               require_signed  ebay.com;
 noreply.autodesk.com            require_signed  noreply.autodesk.com;
 noreply.collegeboard.org        require_signed  noreply.collegeboard.org;
 northlightcolor.com             require_signed  northlightcolor.ccsend.com;
 northwestern.edu                require_signed  iwsend.com;
 notices.rei.com                 require_signed  notices.rei.com;
 notification.capitalone.com     require_signed  notification.capitalone.com
 notification.intuit.com         require_signed  notification.intuit.com;
+notifications.gmfinancial.com   require_signed  notifications.gmfinancial.com;
 notifications.intuit.com        require_signed  notifications.intuit.com;
 notifications.networksolutions.com require_signed  notifications.networksolutions.com;
 notifications.pinterest.com     require_signed  notifications.pinterest.com;
 notifications.wm.com            require_signed  notifications.wm.com;
 notify.email.aa.com             require_signed  notify.email.aa.com;
 notify.meetmemail.com           require_signed  notify.meetmemail.com;
 notify.transunion.com           require_signed  notify.transunion.com;
 novitex.com                     require_signed  pbmsnovitex.onmicrosoft.com;
 npm.org                         require_signed  "npm-org.20150623.gappssmtp.com,smtp.com,auth.ccsend.com";
+npr.org                         require_signed  npr.org;                        // some unsigned mail via pphosted should pass strong spf
+npsights.com                    require_signed  rnsights.com;
 nrailafrontlines.com            require_signed  nrailafrontlines.com;
 nrdc.org                        require_signed  nrdc1.onmicrosoft.com;
 nsbaadvocate.com                require_signed  mmsend.com;
-ntlpartner.com                  require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+ntlpartner.com                  require_signed  "*.getresponse.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 nvie.nevada.edu                 require_signed  nevadaie.ccsend.com;
 nyiad.edu                       require_signed  icontactmail1.com;
 nytimes.com                     signed_white    "nytimes.com,nytimes-com.20150623.gappssmtp.com";   // some unsigned mail via navisite.net not listed in their spf record
 oaktreecapital.com              require_signed  oaktreecapital.com;
 oakwoodveneer.com               require_signed  em.secureserver.net;
 officebasics.com                require_signed  "officebasics.onmicrosoft.com,officebasics.ccsend.com";
 officeteam.com                  require_signed  roberthalf.onmicrosoft.com;
 officialpoc.com                 require_signed  smtpsend.com;                   // sam registration stuff
 offset.com                      require_signed  offset.com;
 ogjo-media.com                  require_signed  ogjo-media.com;                 // pennwell for neal
-ogunquitplayhouse.org           require_signed  ogunquitplayhouse.org;
+ogunquitplayhouse.org           signed_white    ogunquitplayhouse.org;          // password resets are unsigned from sendlabs.com not listed in spf
 okta.com                        require_signed  okta.com;
 oldnavy.com                     require_signed  oldnavy.com;
-olmcatholicschool.com           require_signed  "olmcatholicschool-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+olmcatholicschool.com           require_signed  "olmcatholicschool-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 olmrcs.com                      require_signed  olmrcs-com.20150623.gappssmtp.com;
 omegamoulding.com               signed_white    omega-moulding-company.ccsend.com;  // unsigned mail from their own servers, broken spf record so no fallback
 online.att-mail.com             require_signed  online.att-mail.com;
 onlineaudiotraining.com         require_signed  onlineaudiotraining.com;
 online.costco.com               require_signed  online.costco.com;
 online.essentra.com             require_signed  online.essentra.com;
 online.wsfsbank.com             require_signed  online.wsfsbank.com             // unsigned mail should pass spf -all
 onmogul.com                     require_signed  onmogul.com;
-onpeak.com                      require_signed  "onpeak.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+onpeak.com                      require_signed  "onpeak.com,viadcorp.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 onvia.com                       require_signed  onvia.com;
 oo-software.com                 require_signed  oo-software.com;
 opayq.com                       require_signed  opayq.com;
 openemail.americanexpress.com   require_signed  openemail.americanexpress.com;
 opentable.com                   require_signed  "opentable.com,contact.opentable.com";
 operaphila.org                  require_signed  operaphila.org;
 oppenheimerfunds.com            require_signed  oppenheimerfunds.com;
 ops.bloomingdales.com           require_signed  ops.bloomingdales.com;
-optx2020.com                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+optx2020.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 orastudios.com                  require_signed  orastudios.com;
 orbuscompany.com                require_signed  orbuscompany.onmicrosoft.com;
-orbus.com                       require_signed  "orbuscompany.onmicrosoft.com,orbus.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+orbus.com                       require_signed  "orbuscompany.onmicrosoft.com,orbus.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 order.potterybarnkids.com       require_signed  order.potterybarnkids.com;
 orders.homedepot.com            require_signed  orders.homedepot.com;
 order.williams-sonoma.com       require_signed  order.williams-sonoma.com;
 oriphe.com                      require_signed  veryvp.net;
 os-email.com                    require_signed  os-email.com;
 os-media.com                    require_signed  os-media.com;
 osv.com                         require_signed  osvparish.ccsend.com;
-ottingergolf.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net,scotlandrun.ccsend.com";
+ottingergolf.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net,scotlandrun.ccsend.com";
-ottolearn.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+ottolearn.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 ourrevolution.com               require_signed  ourrevolution.com;
 ourtime.com                     require_signed  ourtime.com;
 outdoorfest.com                 require_signed  outdoorfest.com;
 outfrontmedia.com               require_signed  "cbsoa.onmicrosoft.com,auth.ccsend.com";
+outlooknewspapers.com           require_signed  outlooknewspapers.onmicrosoft.com;
 outsiderclub.com                require_signed  "outsiderclub.com,bluehornet.com";
 outsource.com                   require_signed  outsource.com;
 overnightkitchens.com           require_signed  overnightkitchens.com;
 overstock.com                   require_signed  overstock.com;
 ownerreminders.com              require_signed  ownerreminders.com;
 oyrtbetham.org                  require_signed  oyrtbetham.onmicrosoft.com;
 p66.com                         require_signed  p66.com;
 paalerts.com                    require_signed  paalerts.com;                   // broken signatures, but passes spf
 pac-cap.com                     require_signed  thelakearrowheadvillage.ccsend.com;
 pacific.edu                     require_signed  "imodules.com,bluehornet.com";
-pacificmachinetools.com         require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+pacificmachinetools.com         require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 pacmail.em.marketinghq.net      require_signed  pacmail.em.marketinghq.net;
 paintingwithatwist.com          require_signed  paintingwithatwist-com.20150623.gappssmtp.com;
 paintsquare.com                 require_signed  paintsquare.com;
 palazzodelsol.com               require_signed  icontactmail1.com;
 palimountain.com                require_signed  palimountain.onmicrosoft.com;
 palmislandcaribbean.com         require_signed  zmaildirect.com;
 paloma.washingtonpost.com       require_signed  paloma.washingtonpost.com;
 pandora.com                     signed_white    "pandora.com,sg.pandora.com";   // some unsigned mail directly from pandora mail servers
+panerabreadnews.com             require_signed  panerabreadnews.com;
 pangeabuilders.com              require_signed  pangeabuilders.com;
 paperlesspost.com               require_signed  "paperlesspost.com,*.paperlesspost.com";
-paradigmimaging.com             require_signed  "store.smtp.bigcommerce.net,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+paradigmimaging.com             require_signed  "store.smtp.bigcommerce.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 parallels-universe.com          require_signed  parallels-universe.com;
 paramountsign.com               require_signed  "email.shopvox.com,paramountsign-com.20150623.gappssmtp.com"
 parcelpending.com               require_signed  parcelpending.com;
 parkrideflyusa.com              require_signed  "yo155.com,publicaster.com,bsftransmit7.com";
-partsgeek.com                   require_signed  "smtpserver.email,smtpsendmail.com,partsgeek.ccsend.com";
+partners.woodsmith.com          require_signed  partners.woodsmith.com;
-pasadenaindependent.com         require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+partsgeek.com                   require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com,partsgeek.ccsend.com";
-pasadenarose.com                require_signed  "pasadenarose-com.20150623.gappssmtp.com,pasadenamonthly.ccsend.com";
+pasadenaindependent.com         require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-passyunk.org                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+pasadenarose.com                require_signed  "pasadenarose-com.20150623.gappssmtp.com,*.ccsend.com,*.hubspotemail.net";
+passyunk.org                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 pastorrick.com                  require_signed  bluehornet.com;
 patientconnect365.com           require_signed  patientconnect365.com;
 patients.pgsurveying.com        require_signed  patients.pgsurveying.com;
 patreasury.gov                  require_signed  patreasury.gov;
 patriotsofamerica.com           require_signed  patriotsofamerica.com;
 pay.amazon.com                  require_signed  amazon.com;
 paychex.com                     require_signed  paychex.com;
 paylocity.com                   require_signed  paylocity.com;
 paypal.com                      require_signed  paypal.com;
 payproglobal.com                require_signed  email.payproglobal.com;
-payrollcentric.com              require_signed  "smtpserver.email,smtpsendmail.com,smtp.com,em.evolutionhcm.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+payrollcentric.com              signed_white    "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com,em.evolutionhcm.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";  // some unsigned mail via their own servers
 payrollcentric.zendesk.com      require_signed  "gmailmarkup.zendesk.com,zendesk.com";
 payroll.fidelity.com            require_signed  payroll.fidelity.com;
 paytrace.com                    require_signed  paytrace.com;
 pb.com                          signed_white    pbinc.onmicrosoft.com;          // some unsigned mail via exacttarget not listed in their spf record
 pda.org                         require_signed  pda.org;
 pdffiller.com                   require_signed  pdffiller.com;
-peakhourapp.com                 require_signed  "peakhourapp-com.20150623.gappssmtp,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+peakhourapp.com                 require_signed  "peakhourapp-com.20150623.gappssmtp,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+pearison.com                    require_signed  pearison.onmicrosoft.com;
 peavit.com                      require_signed  netorgft2525885.onmicrosoft.com;
+pemail.lq.com                   require_signed  pemail.lq.com;
 pennfuture.org                  require_signed  salsalabs.org;
+pennockins.com                  require_signed  pennockins.ccsend.com;
 pennsylvanialotteryemail.com    require_signed  pennsylvanialotteryemail.com;
 pennsys.com                     signed_white    quosal.com;                     // some unsigned mail
 penske.com                      require_signed  penske.com;
 peralta.edu                     require_signed  peralta4.onmicrosoft.com;
 perfectpotluck.com              require_signed  perfectpotluck.com;
 perfectpractice.com             require_signed  www-perfectpractice.ccsend.com;
 perkspot.com                    require_signed  perkspot.com;
 perrinconferences.com           require_signed  perrinconferences.ccsend.com;
 petmountain.com                 require_signed  "petmountain.com,amazonses.com";
 petro-media.com                 require_signed  petro-media.com;                // pennwell for neal
+petsuppliesplusemail.com        require_signed  petsuppliesplusemail.com;
 pfizer.com                      require_signed  "pfizer.com,yrb.onmicrosoft.com";
 pgisports.com                   require_signed  infusionmail.com;
 pharmacy.cvs.com                require_signed  pharmacy.cvs.com;
 p.healthandwellnessalerts.berkeley.edu require_signed  p.healthandwellnessalerts.berkeley.edu;
 phelpsmediagroup.com            require_signed  "phelpsmediagroup.ccsend.com,auth.ccsend.com";
 philadelphiarunner.com          require_signed  philadelphiarunner.ccsend.com;
 phila.gov                       signed_white    "phila.onmicrosoft.com,auth.ccsend.com";    // unsigned via exacttarget not listed in their spf record
 philamuseum.org                 signed_white    "cmail19.com,cmail20.com";      // some unsigned mail via outlook
 philly.com                      require_signed  philly.com;
+phillyfitmagazine.com           require_signed  phillyfit.ccsend.com;
 phillyleagues.com               require_signed  phillyleagues.ccsend.com;
 phillynewssubscriptionservices.com      require_signed  phillynewssubscriptionservices.com;
 phillypaws.org                  require_signed  icontactmail9.com;
 phillypops.org                  require_signed  phillypops.org;
 phillytrib.com                  require_signed  phillytrib.com;
 philmontcc.org                  require_signed  philmontcc.org;
 philorch.org                    require_signed  philorch.org;
 photoemail.walgreens.com        require_signed  photoemail.walgreens.com;
-physiqonomics.com               require_signed  ckmail4.com;
+phs.org                         require_signed  phs.org;
+physiqonomics.com               require_signed  "ckmail4.com,*.convertkit.com";
 piab.com                        require_signed  piab.com;
 pianet.org                      require_signed  "moon-ray.com,mmsend.com";
 pika-energy.com                 require_signed  pika-energy-com.20150623.gappssmtp.com;
 pimed.com                       require_signed  lists.jobsonmail.com;
 pimhendriksen.com               require_signed  emlr2.com;
 portal.io                       require_signed  portal-io.20150623.gappssmtp.com;
 poshmark.com                    require_signed  email.poshmark.com;
 postergarden.com                require_signed  postergarden.com;
 powell.com                      require_signed  powell.com;
 ppfa.org                        require_signed  ppfa.org;
-precise-law.com                 require_signed  "preciseinc1.onmicrosoft.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+precise-law.com                 require_signed  "preciseinc1.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+preferredcfo.com                require_signed  preferredcfo-com.20150623.gappssmtp.com;
 premierenergygroup.com          require_signed  premierenergygroup.ccsend.com;
 premiergoldupdate.com           require_signed  premiergoldupdate.com;
 premium.shiftdailynews.com      require_signed  premium.shiftdailynews.com;
 premiumstore.com                require_signed  premiumstore.com;
 presscorp.org                   require_signed  presscorp.org;
 primalsourcenews.com            require_signed  primalsourcenews.com;
-princetheater.org               signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+princetheater.org               signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 printavo.com                    require_signed  printavo.com;
 printmediamn.com                require_signed  northlightcolor.ccsend.com;
 printpack.com                   require_signed  printpack-com.20150623.gappssmtp.com;
 privy.com                       require_signed  privy.com;
 procerahealth.com               require_signed  "procerahealth.com,auth.ccsend.com";
 procureware.com                 require_signed  procureware.com;
+prodivnet.com                   require_signed  email.prodivnet.com;
 producersesourcenews.com        require_signed  producersesourcenews.com;
 productionmachining.com         require_signed  productionmachining.com;
+progmechs.com                   require_signed  netorg1358023.onmicrosoft.com;
 progressiveagent.com            require_signed  b2b-mail.net;
 proofhq.com                     require_signed  proofhq.com;
 prop.trulia.com                 require_signed  prop.trulia.com;
+prospecthillco.com              require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 protradertoday.com              require_signed  protradertoday.com;
 providesupport.com              require_signed  providesupport.com;
 proxyvote.com                   require_signed  proxyvote.com;
 prucentermail.com               require_signed  prucentermail.com;
 pslgroup.com                    require_signed  pslgroup.com;
 pssl.com                        require_signed  pssl.com;
 psu.edu                         signed_white    icontactmail4.com;              // some unsigned mail from their own servers with no spf txt record
 ptcommunity.com                 require_signed  mmmm.ccsend.com;
 ptc.starwoodhotelsemail.com     require_signed  ptc.starwoodhotelsemail.com;
 p.tigerdirect.com               require_signed  p.tigerdirect.com;
-ptynews.info                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+ptynews.info                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 publicdomainreview.org          require_signed  "publicdomainreview.org,amazonses.com"; // some broken signatures (missing dns key) from publicdomainreview.org
 public.govdelivery.com          require_signed  public.govdelivery.com;
 pub.mediadc.com                 require_signed  pub.mediadc.com;
 pub.zinio.com                   require_signed  pub.zinio.com;
 pugnationla.org                 require_signed  elasticemail.com;
 pumpitupfun.com                 require_signed  email.pumpitupfun.com;
+purdue.edu                      require_signed  purdue.edu;
 purewow.com                     require_signed  purewow.com;
 pvpusd.net                      require_signed  pvpusd.onmicrosoft.com;
-qgemail.com                     require_signed  qgemail.com;
+qualityliquorstore.com          require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-qualityliquorstore.com          require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 qualtrics-research.com          require_signed  qemailserver.com;
 queenmary.com                   require_signed  zmaildirect.com;
 queensboro.com                  require_signed  queensboro.com;
 quellrelief.com                 require_signed  "quellrelief.com,*.hubspotemail.net"
+quenchagency.com                require_signed  quenchagency-com.20150623.gappssmtp.com;
 questdiagnostics.com            require_signed  inbound.dcm8.com;
 questexnetwork.com              require_signed  questexnetwork.com;
 quinnipiac-info.org             require_signed  quinnipiac-info.org;
 quora.com                       require_signed  "quora.com,email.quora.com";
 quote01.email-allstate.com      require_signed  quote01.email-allstate.com;
 quotient.com                    signed_white    couponsinc.onmicrosoft.com;     // some unsigned mail via salesforce
 racewire.com                    require_signed  racewire.com;
 rackspace.com                   require_signed  cp.rackspace.com;
 radke.co                        require_signed  radke-co.20150623.gappssmtp.com;
 raise3d.freshdesk.com           require_signed  freshdesk.com;
+raleysstores.com                require_signed  raleysstores.com;
 rallypoint.com                  require_signed  rallypoint.com;
 randjsc.com                     require_signed  randjsc.onmicrosoft.com;
 randpac.com                     require_signed  bluehornet.com;
-randstadusa.com                 require_signed  rfo.contacts.randstadusa.com;
+randstadusa.com                 require_signed  "*.randstadusa.com";
 randybryceforcongress.com       require_signed  "bounce.bluestatedigital.com,bounce.myngp.com";
-rapidnews.com                   require_signed  "rapidnews-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+rapidnews.com                   require_signed  "rapidnews-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 ravepro.com                     require_signed  icontactmail1.com;
 rbc.com.pa                      require_signed  "rbc-com-pa.20150623.gappssmtp.com,mpdkim2.ch";
 rcam.target.com                 require_signed  rcam.target.com;
 rcg-la.com                      require_signed  rcg-la.ccsend.com;
 realage-mail.com                require_signed  realage-mail.com;
 recordreform.com                require_signed  medquest.ccsend.com;
 reddit.com                      require_signed  reddit.com;
-redlandstruckservice.com        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+redheartland.com                require_signed  redheartland.com;
+redlandstruckservice.com        require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+redtri.com                      require_signed  "redtri-com.20150623.gappssmtp.com,redtri.com,amazonses.com";
 refinery29.com                  require_signed  "refinery29.com,refinery29-com.20150623.gappssmtp.com";
-regus.com                       signed_white    "regus.com,regusgroupservices.onmicrosoft.com,mandrillapp.com"; // some unsigned mail from e-dunning
+regus.com                       signed_white    "regus.com,regusgroupservices.onmicrosoft.com,mandrillapp.com,mailchimpapp.net"; // some unsigned mail from e-dunning
 rel1.aeroplan.com               require_signed  rel1.aeroplan.com;
-religioussupply.com             require_signed  religioussupplies.com;
+religioussupply.com             require_signed  "religioussupplies.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 reminder10.creditkarma.com      require_signed  reminder.creditkarma.com;
 reminder11.creditkarma.com      require_signed  reminder.creditkarma.com;
 reminder5.creditkarma.com       require_signed  reminder.creditkarma.com;
 reminder6.creditkarma.com       require_signed  reminder.creditkarma.com;
 reminder7.creditkarma.com       require_signed  reminder.creditkarma.com;
 reminder9.creditkarma.com       require_signed  reminder.creditkarma.com;
 reminder.honda.com              require_signed  reminder.honda.com;
 remindmemd.com                  require_signed  remindmemd.com;
 rentalcars.com                  require_signed  rentalcars.com;
 rentlooker.site                 require_signed  amazonses.com;
+rentmanager.com                 require_signed  rentmanager.com;                // unsigned, but passes strong spf
 replies.charlestyrwhitt.com     require_signed  replies.charlestyrwhitt.com;
 reply1.ebay.com                 require_signed  reply1.ebay.com;
 reply.boltonpac.com             require_signed  reply.boltonpac.com;
-reply.broadwaydiscounts.com     require_signed  reply.broadwaydiscounts.com;
+reply.broadwaydiscounts.com     require_signed  "reply.broadwaydiscounts.com,broadwaydiscounts.com";
 reply.bronto.com                require_signed  bronto.com;
 reply.ebay.com                  require_signed  ebay.com;
 reply.gopinsiderbrief.com       require_signed  reply.gopinsiderbrief.com;
 reply.harrietcarter.com         require_signed  reply.harrietcarter.com;
 reply.ien.com                   require_signed  reply.ien.com;
 resellerratings.com             require_signed  resellerratings.com;
 reservebar.com                  require_signed  reservebar.com;
 resnap.com                      require_signed  resnap.com;
 resnexus.com                    require_signed  resnexus.com;
 resonantmastering.com           require_signed  resonantmastering-com.20150623.gappssmtp.com;
+response.americanexpress.com    require_signed  response.americanexpress.com;
 response.ebags.com              require_signed  response.ebags.com;
 response.nfcu.org               require_signed  response.nfcu.org;
 revinate.com                    require_signed  inguest.com;
+revistaflap.com.br              require_signed  revistaflap.onmicrosoft.com;
 re.walgreens.com                require_signed  re.walgreens.com;
 rewards.shopyourwayrewards.com  require_signed  rewards.shopyourwayrewards.com;
 rewardupdates.wholefoodsmarket.com require_signed  rewardupdates.wholefoodsmarket.com;
+reyesccb.com                    require_signed  reyesholdings.onmicrosoft.com;
 r.groupon.com                   require_signed  r.groupon.com;
 rht.com                         require_signed  roberthalf.onmicrosoft.com;
-ricardoalmeida.com              require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+ricardoalmeida.com              require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 richardsolomonreplies.com       require_signed  richardsolomonreplies.com;
 richmondproductions.com         signed_white    richmondproductions-com.20150623.gappssmtp.com; // diane@solvang
 rickwarren.org                  require_signed  bluehornet.com;
-rimage.com                      signed_white    rimagede.onmicrosoft.com;       // broken spf - multiple inconsistent records
+rimage.com                      require_signed  rimagede.onmicrosoft.com;       // some unsigned mail passes strong spf
 rimsd.k12.ca.us                 require_signed  rimoftheworldu.onmicrosoft.com;
 riogrande.com                   require_signed  riogrande.com;
 riponprinters.com               require_signed  riponprinters.ccsend.com;
 rismedia-enews.com              require_signed  rismedia-enews.com;
+rittenhousehotel.com            require_signed  contact-client.com;
 ritz-ritz.us                    require_signed  ritz-ritz.us;
 rlsassociates.com               require_signed  icontactmail3.com;
 rmsmg.com                       require_signed  rmsmg.com;                      // opoc_leaking for mbmg client
 roberthalf.com                  signed_white    roberthalf.onmicrosoft.com;     // some unsigned via geninfo.com
 robsonforensic.com              signed_white    "*.shared.hubspot.com";         // unsigned mail from their barracuda servers
-roku.com                        require_signed  roku.onmicrosoft.com;
+roku.com                        signed_white    roku.onmicrosoft.com;           // unsigned billing mail via ariasystems.net not listed in their spf record
 roomster.com                    require_signed  roomster.com;
 rosewe.com                      require_signed  rosewe.com;
 roundabouttheatre.org           require_signed  roundabouttheatre.org;
 route.monster.com               require_signed  monster.com;
 rply.b21pubs.com                require_signed  netatlantic.com;
 rrca.org                        require_signed  rrca.ccsend.com;
 rs.email.nextdoor.com           require_signed  email.nextdoor.com;
+rsu21.net                       require_signed  rsu21.net;
 rt.email.aa.com                 require_signed  rt.email.aa.com;
 rubinproperties.com             require_signed  rubinproperties-com.20150623.gappssmtp.com;
 rubinproperties.mailer.appfolio.us require_signed  appfolio.com;
 runsignup.com                   require_signed  runsignup.com;
 ruthschrismail.com              require_signed  ruthschrismail.com;
 rwealthmanagement.com           require_signed  rwealthmanagement-com.20150623.gappssmtp.com;
+rwlynch.com                     require_signed  "rwlynch.com,e2ma.net";
 rwu.edu                         require_signed  technolutions.net;
 rxhealthalerts.com              require_signed  rxhealthalerts.com;
 rxorder.walgreens.com           require_signed  rxorder.walgreens.com;
 saddleback.edu                  require_signed  livesocccd.onmicrosoft.com;
 safehome.adt.com                require_signed  safehome.adt.com;
 safesend.com                    require_signed  safesend.com;
 salamanderhotels.com            require_signed  salamanderhotels.com;
 salamanderresort.com            require_signed  "salamanderresort.com,salamanderhotels.com";
+salonrunner.com                 require_signed  salonrunner.com;
 samplingsupplies.com            require_signed  samplingsupplies.com;
-sandpiperrental.com             require_signed  "sandpiperrental.com,amazonses.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";;
+sandpiperrental.com             require_signed  "sandpiperrental.com,amazonses.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";;
 sanofi.com                      require_signed  sanofi.com;                     // unsigned spam via exacttarget
 santamariasun.com               require_signed  santamariasun-com.20150623.gappssmtp.com;
+santander.us                    require_signed  santander.us;
 sap.com                         signed_white    bluehornet.com;                 // probably other signers
 save.nature.org                 require_signed  save.nature.org;
 save.spirit-airlines.com        require_signed  save.spirit-airlines.com;
+savingthewest.org               signed_white    savingthewest.org;              // unsigned mail via mailchimp
 sbcsd.org                       require_signed  sbcsd.onmicrosoft.com;
+sbgtv.com                       require_signed  sbgtv.com;
 sbpub.com                       require_signed  "publicaster.com,bsftransmit7.com";
 sbs.nyc.gov                     require_signed  "auth.ccsend.com,nycsbs.ccsend.com";
+sc.com                          require_signed  sc.com;
 schedulepayment.com             require_signed  schedulepayment.com;
 schoology.com                   require_signed  email.schoology.com;
 schoox.com                      require_signed  mail.intercom.io;
 scoremorerewards.com            require_signed  scoremorerewards.com;
 scotnery.com                    require_signed  scotnery.com;
+scottthomasid.com               require_signed  scottthomasid.com;
 scoutbook.com                   require_signed  scoutbook.com;
-scouting.org                    require_signed  "scouting.org,scouting.ccsend.com";
+scouting.org                    require_signed  "scouting.org,doubleknot.com,scouting.ccsend.com";
 scoutmob.com                    require_signed  scoutmob.com;
+screamervision.com              require_signed  screamervision-com.20150623.gappssmtp.com;
+scripps.com                     require_signed  ewscripps.onmicrosoft.com;
 scup.org                        require_signed  em.secureserver.net;
 scwmediasystems.com             signed_white    outlook.com;
 sdi.com                         require_signed  sdi2.onmicrosoft.com;
 seatgeek.com                    require_signed  seatgeek.com;
 seatme.com                      require_signed  seatme.com;
 secondstreet.com                require_signed  secondstreet.com;
 securedata-trans.com            require_signed  mg.securedata-trans.com;
 secure.fraudarmorservice.com    require_signed  secure.fraudarmorservice.com;
 secure.norton.com               require_signed  secure.norton.com;
 secureserver.net                require_signed  em.secureserver.net;
+security.co.uk                  require_signed  security.co.uk;                 // unsigned mail should pass spf -all
 selectmedical.com               require_signed  selectmedical.com;
-sellerlabs.com                  require_signed  "sellerlabs.com,dripemail2.com,pm.mtasv.net";
+sellerlabs.com                  require_signed  "sellerlabs.com,*.acemsrvb.com";
 send.grammarly.com              require_signed  send.grammarly.com;
 sendtax.hrblock.com             require_signed  sendtax.hrblock.com;
 sennheiser.com                  require_signed  sennheiseroffice365.onmicrosoft.com;
 sensorcon.com                   require_signed  sensorcon-com.20150623.gappssmtp.com;
 service01.email-allstate.com    require_signed  service01.email-allstate.com;
 service.capitalone.com          require_signed  capitalone.com;
 service.checkout.visa.com       require_signed  service.checkout.visa.com;
 service.dealer-enews.com        require_signed  service.dealer-enews.com;
 service.govdelivery.com         require_signed  service.govdelivery.com;
 service.grainger.com            require_signed  service.grainger.com;
+service.readyrefresh.com        require_signed  nestle.onmicrosoft.com;
 service.shutterstockmail.com    require_signed  shutterstockmail.com;
 services.target.com             require_signed  services.target.com;
 service.stubhub.com             require_signed  service.stubhub.com;
 service.target.com              require_signed  service.target.com;
+servicetitan.com                require_signed  servicetitan.com;
 servicing.plenti.com            require_signed  servicing.plenti.com;
 servicing.synchronyfinancial.com require_signed servicing.synchronyfinancial.com;
 sesenergy.org                   require_signed  secureenergy.onmicrosoft.com;
 sfbcoffee.com                   require_signed  "sfbcoffee.com,mg.oaklandcoffee.com";   // unsigned junk via listrak fails spf, multiple spf records
 sfcable.com                     require_signed  sfcable.com;
 shopassociation.org             require_signed  bluehornet.com;
 shopbecker.com                  require_signed  "shopbecker.ccsend.com,amazonses.com";
 shop.c21stores.com              require_signed  shop.c21stores.com;
 shopcandelabra.com              require_signed  shopcandelabra.ccsend.com;
 shopdeluxe.com                  require_signed  deluxe.onmicrosoft.com;
-shopify.com                     require_signed  "shopify.com,zendesk.com";
+shopify.com                     require_signed  "shopify.com,zendesk.com,*.hubspot.com";
 shop.newbalance.com             require_signed  shop.newbalance.com;
 shoppermarketing.ims-stats.com  require_signed  shoppermarketing.ims-stats.com;
 shopping.hammacher.com          require_signed  "shopping.hammacher.com,email.triggermail.io";
 shopping.ibemail.com            require_signed  shopping.ibemail.com;
-shoprunner.com                  require_signed  shoprunner.com;
+shoprunner.com                  signed_white    shoprunner.com;                 // some unsigned mail via salesforce
 shopspring.com                  require_signed  shopspring.com;
+shop.stevemadden.com            require_signed  "stevemadden.com,shop.stevemadden.com";
 shoptalk.com                    require_signed  shoptalk.com;
 shoptiques.com                  require_signed  shoptiques.com;
 shutterstockmail.com            require_signed  shutterstockmail.com;
 siegelagency.com                require_signed  "siegelagency.ccsend.com,pptsend03.com";
+siftly.com                      require_signed  siftly.com;
 signaturehardware.com           require_signed  signaturehardware.com;
 signnow.com                     require_signed  signnow.com;
 signprosystems.com              require_signed  orbus.ccsend.com;
 silentmessages.com              require_signed  icontactmail1.com;
 simon.com                       require_signed  simon.com;
 sircon.com                      require_signed  vertafore.onmicrosoft.com;
 siriusxm.com                    require_signed  siriusradio.onmicrosoft.com;
-sixtyfourmusic.com              require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+sixtyfourmusic.com              require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 sjbde.org                       require_signed  sjbde-org.20150623.gappssmtp.com;
+s.jcpenney.com                  require_signed  s.jcpenney.com;
 sjf.com                         require_signed  sjf.ccsend.com;
 skechers-alerts.com             require_signed  skechers-alerts.com;
 skechers.com                    require_signed  bluehornet.com;
 skillshare.com                  require_signed  skillshare.com;
 skillsurvey.com                 require_signed  skillsurvey.com;
 skuvault.com                    require_signed  skuvault.com;
 slack.com                       require_signed  slack.com;
 slinfo.pptsend02.com            require_signed  slinfo.pptsend02.com;
+slnews.pptsend02.com            require_signed  slnews.pptsend02.com;
 s.logmein.com                   require_signed  s.logmein.com;
 smartpros.com                   require_signed  smartpros.com;
 smart-shopping.thredup.com      require_signed  smart-shopping.thredup.com;
-smathersandbranson.com          require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+smathersandbranson.com          require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 sm.ihg.com                      require_signed  sm.ihg.com;
 smith-wesson.com                require_signed  icontactmail1.com;
 smitv.org                       require_signed  "netorg1915413.onmicrosoft.com,auth.ccsend.com";
 smm.global                      require_signed  smm.global;
 smp.org                         require_signed  smp.org;
 snooth.com                      require_signed  mg.snoothmail.com;
 snpictures.com                  require_signed  snpictures-com.20150623.gappssmtp.com;
 socialsecurityworks.org         require_signed  sg.actionnetwork.org;
 societyforscience-email.com     require_signed  societyforscience-email.com;
 socksaddict.com                 require_signed  bronto.com;
+soldierfield.net                require_signed  icontactmail2.com;
 sony.com                        signed_white    sony.onmicrosoft.com;           // some unsigned mail via lightpath
 sos.ca.gov                      require_signed  "californiagold.onmicrosoft.com,auth.ccsend.com";
 soul-cycle.com                  require_signed  e2ma.net;
 soundcloud.com                  require_signed  soundcloud.com;
 sourcelink.com                  require_signed  sourcelink.com;
 specialty-freight.com           require_signed  specialty-freight.com;
 spglobal.com                    require_signed  spglobal.com;
 spiceworks.com                  require_signed  spiceworks.com;
 spie.org                        require_signed  spieorg.onmicrosoft.com;
 splitly.com                     require_signed  splitly.com;
+sportscardigest.com             require_signed  aweber.com;
+sports.yahoo.com                require_signed  sports.yahoo.com;
 spotcrime.com                   require_signed  spotcrime.com;
 spotify.com                     require_signed  spotify.com;
-springboardmedia.com            require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+springboardmedia.com            require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 springer.com                    require_signed  springer.com;
 springeronline.com              require_signed  springeronline.com;
 sprint.delivery.net             require_signed  sprint.delivery.net;
 squarespace.com                 require_signed  squarespace.com;
 squaretrade.com                 require_signed  squaretrade.com;
 stambaughness.com               require_signed  stambaughness.ccsend.com;
 standard.com                    require_signed  standard.com;
 standunited.org                 require_signed  "standunited.org,mailings.standunited.org";
 stanford.edu                    require_signed  "stanford.edu,office365stanford.onmicrosoft.com";
 stanfordhealthcare.org          signed_white    sbshare1.wc08.net;              // might have some other signers
-staplesadvantage.com            require_signed  yotpo.com;
+staplesadvantage.com            require_signed  "staplesadvantage.com,yotpo.com";
 staples.com                     signed_white    "ussicorp5.onmicrosoft.com,mktroute.com";   // some unsigned mail via salesforce
 statefarminfo.com               require_signed  statefarminfo.com;
 state.gov                       require_signed  state.gov;
 state.mn.us                     require_signed  mn365.onmicrosoft.com;
-statnews.com                    require_signed  "statnews.com,statnews-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+statnews.com                    require_signed  "statnews.com,statnews-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 steeleassetmanagement.net       require_signed  gmail.com;
 steelforge.com                  require_signed  b2b-mail.net;
-sterlinglimoservice.com         require_signed  aro365516309.onmicrosoft.com;
+sterlinglimoservice.com         require_signed  "aro365516309.onmicrosoft.com,limoemailmarketing.com";
 stjstr.org                      require_signed  "stjstr-org.20150623.gappssmtp.com,mystudentsprogress.com";
 stonybrook-u.org                require_signed  stonybrook-u.org;
 store.aabacosmallbusiness.com   require_signed  yahoo.com;
+stores.lordandtaylor.com        require_signed  stores.lordandtaylor.com;
 store.yahoo.com                 require_signed  yahoo.com;
 stringacademyofwisconsin.org    require_signed  panthers.onmicrosoft.com;
 stripe.com                      require_signed  stripe.com;
 strongmail.cfmvmail.com         require_signed  strongmail.cfmvmail.com;
 studiomalibu.com                require_signed  studiomalibu-com.20150623.gappssmtp.com;
 subscriptions.cms.hhs.gov       require_signed  subscriptions.cms.hhs.gov;
 subscriptions.gaia.com          require_signed  subscriptions.gaia.com;
 subscriptions.ssa.gov           require_signed  subscriptions.ssa.gov;
 subscription.theatlantic.com    require_signed  subscription.theatlantic.com;
 suggestedjobs.com               require_signed  suggestedjobs.com;
+sundance.org                    require_signed  sundance.org;
 suntrust.com                    require_signed  suntrust.com;
-superbrightleds.com             require_signed  "superbrightleds.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+superbrightleds.com             require_signed  "superbrightleds.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 superflypresents.com            signed_white    superflypresents.com;           // also from mailchimp, not listed in their spf record
 superior-phs.com                require_signed  superior-phs.ccsend.com;
 supermoon.com                   require_signed  supermoonla.onmicrosoft.com;
 support.com                     signed_black    sendgrid.net;                   // apple support scam
 support.facebook.com            require_signed  support.facebook.com;
 support.org                     signed_black    sendgrid.net;                   // apple support scam
 support.yellowstone.org         require_signed  support.yellowstone.org;
 support.zappos.com              require_signed  zappos.com;
+surgeconsultantgroup.com        require_signed  surgeconsultantgroup-com.20150623.gappssmtp.com;
 susquis.com                     require_signed  spsend.com;
 sustainablebrands.com           require_signed  sustainablebrands.com;
 svemail.evesaddiction.com       require_signed  svemail.evesaddiction.com;
 svemail.fromyouflowers.com      require_signed  svemail.fromyouflowers.com;
 svemail.sendflowers.com         require_signed  svemail.sendflowers.com;
 sweetwater.com                  require_signed  sweetwater.com;
 swimstyle.com                   require_signed  swimstyle.com;
 swimsuitsforall.com             require_signed  swimsuitsforall.com;
 swmobileservice.com             require_signed  swmobileservice-com.20150623.gappssmtp.com;
 sws-mail.com                    require_signed  sws-mail.com;
+swstrings.com                   signed_white    swstrings.com;                  // unsigned mail from their web server
 sxsw.com                        require_signed  "sxsw.com,mmxreservations.com";
 symantec.rsys2.com              require_signed  rsys2.com;
 syncplicity.com                 require_signed  syncplicity.com;
 synergem.com                    require_signed  "synergem-com.20150623.gappssmtp.com,synergem.ccsend.com";
-syvchorale.org                  require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+synergysettlements.com          require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+syvchorale.org                  require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+tabshred.com                    require_signed  tabshred.com;
 talend.com                      require_signed  talend.com;
 talentsmartnewsletter.com       require_signed  email.talentsmartnewsletter.com;
 target-reporting.net            require_signed  email.broadcastsavings.com;     // dsgcreative
+tasc.tasconline.com             require_signed  lh1ondemand.com;
 tasmarketing.com                require_signed  tasmarketing.ccsend.com;
 tastingtable.com                require_signed  tastingtable.com;
+taxesinretirement567.com        require_signed  taxesinretirement567.com;
 taxformprinter.com              require_signed  taxformprinter.com;
 taxpracticepro.com              require_signed  taxpracticepro.com;
 taxprofessionalsresource.net    require_signed  taxprofessionalsresource.net;
 team2.targetmarketingmag.com    require_signed  team2.targetmarketingmag.com;
 teamgantt.com                   require_signed  notifications.teamgantt.com;
 team.wrike.com                  require_signed  "wrike.com,mktomail.com";
 teapartybulletin.com            require_signed  teapartybulletin.com;
 teapartypolitics.com            require_signed  teapartypolitics.com;
 teapartypoliticsnews.com        require_signed  teapartypoliticsnews.com;
 techforless-alerts.com          require_signed  techforless-alerts.com;
+t.e.freepeople.com              require_signed  t.e.freepeople.com;
 telescopecasual.com             require_signed  telescope.onmicrosoft.com;
 tennettmfg.com                  require_signed  tennettmfg.com;
 tenthousandvillages.com         require_signed  tenthousandvillages.com;
+terravidahc.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 terumomedical.com               require_signed  terumoamericas.onmicrosoft.com;
+test.com                        require_signed  test.com;                       // typically forged
 textnow.me                      require_signed  textnow.me;
 thankyou.citibank.com           require_signed  thankyou.citibank.com;
 thankyouemails.org              require_signed  thankyouemails.org;
 theaddictedlawyer.com           require_signed  theaddictedlawyer.com;
 theanimalrescuesite.com         require_signed  theanimalrescuesite.com;        // unsigned mail but it passes spf
 theatre.info.cinemark.com       require_signed  theatre.info.cinemark.com;
 theatrephiladelphia.org         require_signed  theatrephiladelphia.ccsend.com;
 thechivery.com                  require_signed  thechivery.com;
 the-citizenry.com               require_signed  "the-citizenry.com,shopify.com,delivery.klaviyomail.com";
-the-efa.org                     require_signed  "the-efa.org,the-efa.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+thedailygrind.news              require_signed  thedailygrind.news;
+the-efa.org                     require_signed  "the-efa.org,the-efa.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 thefisherman.com                require_signed  thefisherman.ccsend.com;
 thegovconadvisors.com           require_signed  reachmail.net;
-thegramlist.com                 require_signed  thegramlist-com.20150623.gappssmtp.com;
+thegramlist.com                 require_signed  "thegramlist-com.20150623.gappssmtp.com,sendgrid.me,mailchimpapp.net";
-thehotviolinist.com             require_signed  "ckmail4.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+thehotviolinist.com             require_signed  "ck.thehotviolinist.com,ckmail4.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 thejurylab.com                  require_signed  icontactmail1.com;
 thelooploft.com                 require_signed  thelooploft.com;
 themagnetgroup.com              require_signed  themagnetgroup.com;
 themichigancatholicchoir.org    require_signed  papadantravel.com;
+theneed2know.com                signed_white    theneed2know.com;               // signing key dropped from dns, clever
+thenobleflame.com               require_signed  thenobleflame.com;
 theproducenews.com              require_signed  theproducenews.ccsend.com;
 therdstore.com                  require_signed  jetrord.ccsend.com;
-therealdeal.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+therealdeal.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 theselfimprovementgenie.com     require_signed  theselfimprovementgenie.com;
 theshadestore.com               require_signed  theshadestore.com;
 thesoccerwire.com               require_signed  hummersport.ccsend.com;
 thesymphony.org                 require_signed  thesymphony.org;
 thetrustadvisor.com             require_signed  thetrustadvisor.com;
 theupsstore.com                 require_signed  "theupsstore.com,tupssfran.onmicrosoft.com,mailgun.signpost.com";
 thewarmingstore.com             require_signed  icontactmail1.com;
 thingiverse.com                 require_signed  thingiverse.com;
 thingtobring.com                require_signed  sendgrid.me;
+thinkadamslaw.com               require_signed  adamslawgroup.onmicrosoft.com;
+thinkla.org                     signed_white    "thinkla.org,thinkla-org.20150623.gappssmtp.com";   // unpublished key for mail via createsend
 thinknewmexico.org              require_signed  congressplus.com;
-thinoptics.com                  require_signed  "groupvine.com,bronto.com";
+thinoptics.com                  require_signed  "groupvine.com,bronto.com,*.klaviyomail.com";
 thirdlove.com                   require_signed  thirdlove.com;
-thomasnet.com                   require_signed  thomasnet.com;
+thomasnet.com                   signed_white    thomasnet.com;                  // some unsigned mail via amazonaws
 thomsonlinear.com               signed_white    fortive.onmicrosoft.com;        // some unsigned mail via salesforce
 thorntontomasetti.com           require_signed  thorntontomasetti.onmicrosoft.com;  // other spam signed by mailchimp
 thriftbooks.com                 require_signed  thriftbooks.onmicrosoft.com;
 thriftbooks-email.com           require_signed  thriftbooks-email.com;
+thriveglobal.com                require_signed  "thriveglobal.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 thrivemarket.com                require_signed  thrivemarket.com;
 ticketfly.com                   require_signed  ticketfly.com;
 ticketleap.com                  require_signed  "ticketleap.com,amazonses.com";
 ticketmaster.com                require_signed  ticketmaster.com;
 tickets.rugbyworldcup.com       require_signed  tickets.rugbyworldcup.com;
-tidio.net                       require_signed  "tidio.net,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+tidio.net                       require_signed  "tidio.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-tieivote.com                    require_signed  smtpserver.email;
+tieivote.com                    require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 timeout.com                     require_signed  timeout-com.20150623.gappssmtp.com;
 tiogahvac.com                   require_signed  tiogahvac.onmicrosoft.com;
+titanemail.com                  require_signed  "titanemail-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 t.kohls.com                     require_signed  t.kohls.com;
 t.mail.coursera.org             require_signed  t.mail.coursera.org;
 tm.vistaprint.com               require_signed  tm.vistaprint.com;
 tomarind.com                    require_signed  "netorgft1471273.onmicrosoft.com,tomarind.ccsend.com";
+tom.com                         require_signed  tom.com;                        // unsigned mail should pass spf -all
 tomudall.com                    signed_white    bounce.bluestatedigital.com;
+toolsource.com                  require_signed  yahoo.com;
 toomeyforsenate.com             require_signed  toomeyforsenate.com;
 toomey.senate.gov               require_signed  senate.gov;
-touchstonehomeproducts.com      signed_white    "yahoo.com,auth.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+touchstonehomeproducts.com      signed_white    "yahoo.com,auth.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 tower90230.com                  require_signed  tower90230.onmicrosoft.com;
 townhallmail.com                require_signed  townhallmail.com;
 trade.gov                       require_signed  trade.gov;
 traillink.com                   require_signed  traillink.com;
-training.compliancekey.net      require_signed  training.compliancekey.net;
 trainingmag.com                 require_signed  "*.n-email5.net,*.n-email.net"
 trans.duluthtradingemail.com    require_signed  trans.duluthtradingemail.com;
 transferwise.com                require_signed  transferwise.com;
 traveloni.com                   require_signed  "traveloni.com,traveloni.ccsend.com";
+travel-services.americanexpress.com     require_signed  travel-services.americanexpress.com;
 travismanion.org                require_signed  "travismanion.org,omktmail2.com,icontactmail9.com";
 treasuryandtradesolutions.citi.com require_signed  treasuryandtradesolutions.citi.com;
 trekbikes.com                   require_signed  e.trekbikes.com;
 trello.com                      require_signed  trello.com;
 trendhunter.com                 require_signed  trendhunter.ccsend.com;
 tsdnotify.com                   require_signed  tsdnotify.com;                  // car leasing?
 t.snapfish.com                  require_signed  t.snapfish.com;
 t.spiritairlines.com            require_signed  t.spiritairlines.com;
 ttmail.timetrade.com            require_signed  timetrade.com;
 tuhs.temple.edu                 require_signed  tuhs.onmicrosoft.com;
+turner.com                      require_signed  turner.com;
 turnoutpac.org                  signed_white    bounce.bluestatedigital.com;
 tut.com                         require_signed  tut.ccsend.com;
 t.wilsonsleather.com            require_signed  t.wilsonsleather.com;
 twitter.com                     require_signed  twitter.com;
+tx.gov                          require_signed  tx.gov                          // block forged spam mail
 tx.redbox.com                   require_signed  tx.redbox.com;
-tycoint.com                     require_signed  tycointernational.onmicrosoft.com;
+tycoint.com                     require_signed  "tycoint.com,tycointernational.onmicrosoft.com";
 uber.com                        signed_white    "uber.com,sptrans.uber.com,spmail.uber.com";    // unsigned mail from sptrans.uber.com that fails spf
 uberconference.com              require_signed  uberconference.com;
 ubmcanon-info.com               require_signed  ubmcanon-info.com;
 ubs.com                         require_signed  ubs.com;
 ucla.edu                        signed_white    ucla-edu.20150623.gappssmtp.com;    // probably not the only source
 undertone.com                   signed_white    undertone.com;                  // mbmg client
 unionbank.com                   signed_white    unionbank.com;                  // some unsigned mail via cashedge
 unionhomemortgage.com           require_signed  eeoo.co;
 unionleague.org                 signed_white    "unionleague.org,unionleague.ccsend.com";   // some unsigned mail via ppe-hosted.com, wrong spf record, include: vs a:dispatch-us.ppe-hosted.com
 uniquephoto.com                 require_signed  uniquephoto.com;
-unitedyacht.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+united.com                      require_signed  united.com;                     // unsigned but passes spf
+unitedyacht.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 unitronics.com                  require_signed  unitronics.ccsend.com;
 universalsocceracademy.com      require_signed  universalsocceracademy.ccsend.com;
 universityproducts.com          signed_white    icontactmail3.com;              // unsigned mail from their own servers, no spf txt record
 univision.net                   require_signed  uci.onmicrosoft.com;
 unm.edu                         require_signed  unmm.onmicrosoft.com;
 unyson.com                      require_signed  unyson.com;
 uofpittgreensburg.org           require_signed  uofpittgreensburg.org;
 update.santanderbank.com        require_signed  update.santanderbank.com;
 updates.conservativeintel.com   require_signed  updates.conservativeintel.com;
 updates.hayneedle.com           require_signed  updates.hayneedle.com;
+updates.sba.gov                 require_signed  updates.sba.gov;                // unsigned mail should pass spf -all
 updates.ticketnetworkdirect.com require_signed  updates.ticketnetworkdirect.com;
+updates.uscourts.gov            require_signed  updates.uscourts.gov;
 update.trulia.com               require_signed  update.trulia.com;
 uphs.upenn.edu                  signed_white    cvent-planner.com;              // some unsigned mail via en25
 uportland.org                   require_signed  uportland.org;
 uprinting.com                   require_signed  uprinting.com;
 ups.com                         require_signed  ups.com;
 valeant.com                     require_signed  "valeant.com,valeant.onmicrosoft.com";
 value.amerimark.com             require_signed  value.amerimark.com;
 value.kmart.com                 require_signed  value.kmart.com;
 value.sears.com                 require_signed  value.sears.com;
 vanguardcharitable.org          require_signed  cvent-planner.com;
-vehiclemerchandising.com        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+variety.com                     require_signed  variety-com.20150623.gappssmtp.com;
+vehiclemerchandising.com        require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 venmo.com                       require_signed  venmo.com;
 verifone.com                    require_signed  "verifone.com,verifone365.onmicrosoft.com";
 veritivcorp.com                 signed_white    veritivcorp.onmicrosoft.com;    // unsigned via apexanalytix.com that fails spf
 verizon.com                     require_signed  verizon.com;
 verizonenterprise.com           require_signed  verizonenterprise.com;
 vignetteslearning.com           require_signed  simplifiedelearning.ccsend.com;
 vip.conservativeintel.com       require_signed  vip.conservativeintel.com;
 virtualeventbags.com            require_signed  email.virtualeventbags.com;
 visitpartnerhub.com             require_signed  visitpartnerhub.com;
 visitwynn.com                   require_signed  visitwynn.com;
-visstun-digispec.com            require_signed  "smtpserver.email,smtpsendmail.com";
+visstun-digispec.com            signed_white    "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";    // some unsigned mail via dspads.com fails strong spf
-vistana.com                     require_signed  iilg.onmicrosoft.com;           // some unsigned mail passes spf
+vistana.com                     require_signed  "iilg.onmicrosoft.com,sendgrid.net";        // some unsigned mail passes strong spf
 vitalnetix.com                  require_signed  vitalnetix.onmicrosoft.com;
 vitaminmom.com                  require_signed  vitaminmom-com.20150623.gappssmtp.com;
 vivial.net                      require_signed  "vivial.net,email.nearsay.com";
 vlmservice.com                  signed_white    smtpserver.email;               // some unsigned mail via exacttarget
 vlmservice.zendesk.com          require_signed  "zendesk.com,*.zendesk.com"
 vmg-dma.com                     require_signed  hb236.emailos.com;
 vmware.com                      require_signed  onevmw.onmicrosoft.com;
-voiceoverxtra.com               require_signed  "voiceoverxtra.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+voiceoverxtra.com               require_signed  "voiceoverxtra.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+vonage.com                      require_signed  vonage.com;
 vote-now.com                    require_signed  vote-now.com;
+voxmedia.com                    require_signed  voxmedia.com;
 vsimedia.com                    require_signed  vsimedia.onmicrosoft.com;
 vt.edu                          signed_white    bsf01.com;                      // probably other sources also
+vyesports.com                   require_signed  vyesports-com.20150623.gappssmtp.com
 walmart.com                     require_signed  walmart.com;
 wanjugo.com                     require_signed  wanjugo.com;
+warnerbros.com                  require_signed  warnerbros.com;
 warriorcustomgolf.com           require_signed  warriorcustomgolf.com;
 washingtonpost.com              require_signed  washingtonpost.com;
 washjeff-info.org               require_signed  washjeff-info.org;
+washpost.com                    require_signed  washpost.onmicrosoft.com;
 washtimesnews.com               require_signed  washtimesnews.com;
 watchdog.net                    require_signed  sg.actionnetwork.org;
 watchmanmonitoring.com          require_signed  watchmanmonitoring.com;
 waterboards.ca.gov              require_signed  cawaterboards.onmicrosoft.com;
 wayfair.com                     require_signed  "wayfair.com,wayfair.onmicrosoft.com";
-wayneart.org                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+wayneart.org                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 wdsearch.com                    require_signed  wdsearch.com;
 wdw.disneyonline.com            require_signed  disneyonline.com;
 wealthyretirement.com           require_signed  wealthyretirement.com;
 wearealexander.com              require_signed  wearealexander-com.20150623.gappssmtp.com;
 wearecollide.com                require_signed  "wearecollide-com.20150623.gappssmtp.com,mlsend3.com";
 weareultraviolet.org            require_signed  "weareultraviolet.org,list.weareultraviolet.org";
 weather.com                     require_signed  weather.com;
 webcargo.net                    require_signed  webcargo.net;
 webervations.com                require_signed  webervations.com;
-webinar.compliancekey.net       require_signed  webinar.compliancekey.net;
 webopenings.com                 require_signed  webopenings.com;
 webstaurantstore.com            require_signed  webstaurantstore.com;
 weekly-bulletin.com             require_signed  weekly-bulletin.com;
 weilercorpemail.com             require_signed  weilercorpemail.com;
 weinsteinconstruction.com       require_signed  weinsteinconstruction.com;
 welcome.aexp.com                require_signed  welcome.aexp.com;
 wellsfargo.com                  require_signed  wellsfargo.com;
 wellsfargorewards.com           require_signed  wellsfargorewards.com;
 wellspouse.org                  require_signed  wellspouse.org;
 wesendit.com                    require_signed  wesendit.com;
+westernunion.com                unsigned_black  westernunion.com;
 westgermanbmw.com               signed_white    "westgermanbmw.com,xtime.com";  // some unsigned mail via media-mastermind
 westinvacations.com             require_signed  iilg.onmicrosoft.com;
 westrock.com                    signed_white    westrockco.onmicrosoft.com;     // some unsigned mail via outlook
 weta.org                        require_signed  server8839.e-activist.com;
-wetransfer.com                  require_signed  email.wetransfer.com;
+wetransfer.com                  require_signed  wetransfer.com;
-wharton.upenn.edu               require_signed  "wharton.upenn.edu,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+wharton.upenn.edu               require_signed  "wharton.upenn.edu,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 whcandy.com                     require_signed  whcandy.com;
 whitegraphics.com               require_signed  whitegraphics-com.20150623.gappssmtp.com;
 whitesharkmedia.com             require_signed  whitesharkmedia.com;
 wholesaleprime.com              require_signed  "sendgrid.net,frg.im";
 wiley.com                       require_signed  wiley.com;
 williampenninn.com              require_signed  williampenninn.ccsend.com;
 windstream.net                  require_signed  caaonline.ccsend.com;
 wineawesomeness.com             require_signed  wineawesomeness.com;
+wingsmagazine.com               require_signed  wingsmagazine.com;
 winmo.com                       signed_white    "winmo.com,winmo-com.20150623.gappssmtp.com";   // missing winmo.com key in dns
 winzip.com                      require_signed  winzip.com;
 wisecompanyus.com               require_signed  "wisecompanyus.com,wisecompanyus.onmicrosoft.com";
 wisniewskifornj.com             signed_white    bounce.bluestatedigital.com;
 wixshoutout.com                 require_signed  wixshoutout.com;
 wolfbrown.com                   require_signed  wolfbrown.ccsend.com;
 wolfermans-email.com            require_signed  wolfermans-email.com;
 wolfforpa.com                   signed_white    bounce.bluestatedigital.com;
 wolfgordon.com                  require_signed  "wolfgordon.com,b2b-mail.net";
 womenshealthydiets.com          require_signed  womenshealthydiets.com;
-woodturner.org                  require_signed  aawwoodturner.ccsend.com;
+woodturner.org                  signed_white    aawwoodturner.ccsend.com;       // some unsigned mail via g2host.com
 woodworkingshop.com             require_signed  emailwoodworkingshop.com;
 woof.barkshop.com               require_signed  woof.barkshop.com;
 woof.chewy.com                  require_signed  woof.chewy.com;
 woolrich.com                    require_signed  woolrich.com;
 wordpress.com                   require_signed  wordpress.com;
 worknetoccmed.com               require_signed  worknetoccmed.com;
+worldmediaonline.com            require_signed  "worldmediaonline.onmicrosoft.com,auth.ccsend.com";
 worldsciencefestival.com        require_signed  worldsciencefestival.com;
 wrigley.com                     require_signed  "wrigley.com,e2ma.net";
 wsdisplay.com                   require_signed  wsdisplay-com.20150623.gappssmtp.com;
+wsfsbank.com                    require_signed  wsfsbank.com;
+wsj.com                         signed_white    "wsj.com,wsj-com.20150623.gappssmtp.com";   // some unsigned mail via iphmx.com
 wstelecomlaw.com                require_signed  sapronov.onmicrosoft.com;
-wtcphila.org                    require_signed  "wtcphila.onmicrosoft.com,wtcphila.ccsend.com";
+wtcphila.org                    require_signed  "wtcphila.onmicrosoft.com,wtcphila.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 wullo.com                       require_signed  wullo.com;
 wunderman.com                   require_signed  yrb.onmicrosoft.com;
 wyattresearchnewsletters.com    require_signed  wyattresearchnewsletters.com;
 x2vol.com                       require_signed  sendgrid.info;
 xarisma.com                     signed_white    xarisma.com;                    // some unsigned mail via netsuite.com
 xbyte.com                       require_signed  xbyte.com;
 xks.com                         require_signed  xks.com;
 xlive.tm00.com                  require_signed  tm00.com;
 xode.com                        require_signed  xode.com;
+yahoo.ca                        unsigned_black  yahoo.ca;
+yahoo.co.in                     unsigned_black  yahoo.co.in;
+yahoo.co.jp                     unsigned_black  "yahoo.com,yahoo.co.jp";
+yahoo.com.my                    unsigned_black  yahoo.com.my;
+yahoo.com.tw                    unsigned_black  yahoo.com.tw;
+yahoo.com                       unsigned_black  yahoo.com;
+yahoo.co.uk                     unsigned_black  yahoo.co.uk;
+yahoo.de                        unsigned_black  yahoo.de;
+yahoo.fr                        unsigned_black  yahoo.fr;
 yahoo-inc.com                   require_signed  yahoo-inc.com;                  // password resets, etc
+yahoo.in                        unsigned_black  yahoo.in;
 yellowstone.org                 require_signed  mta-bbcspool.convio.net;
-yelp.com                        signed_white    yelp.com;                       // some unsigned mail from their own servers
+yelp.com                        require_signed  yelp.com;
 yipit.com                       require_signed  yipit.com;
 ymca-snoco.org                  require_signed  ymcasnoco.onmicrosoft.com;
 y.mileskimball.com              require_signed  y.mileskimball.com;
 youcaring.com                   require_signed  youcaring.com;
 youngliving.com                 require_signed  youngliving.com;
 youniqueproducts.com            require_signed  youniqueproducts.com;
 youraccount.readyrefresh.com    require_signed  youraccount.readyrefresh.com;
 yourdcdchocolatier.com          require_signed  yourdcdchocolatier.com;
 yourmembership.com              signed_white    yourmembership.com;             // some unsigned mail from their own servers
 yourpotlaw.com                  require_signed  yourpotlaw.com;
-yourstorewizards.com            signed_white    "yourstorewizards.com,yahoo.com,freshdesk.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";   // some unsigned mail via usaepay.com
+yourstorewizards.com            signed_white    "yourstorewizards.com,yahoo.com,freshdesk.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";   // some unsigned mail via usaepay.com
 youthelitesports.org            require_signed  youthelitesports-org.20150623.gappssmtp.com;
 youtube.com                     require_signed  youtube.com;
+yuhsbstudents.org               require_signed  yuhsbstudents-org.20150623.gappssmtp.com;
 yummielife.com                  require_signed  yummielife.com;
+zambezi-la.com                  require_signed  zambezi-la-com.20150623.gappssmtp.com;
 zapier.com                      require_signed  zapier.com;
 zappos.com                      require_signed  zappos.com;
 zenfoliomail.com                require_signed  zenfoliomail.com;
 ziprecruiter.com                require_signed  "ziprecruiter.com,sendgrid.me,sendgrid.ziprecruiter.com";
 zixmessagecenter.com            require_signed  zixmessagecenter.com;
 zomato.com                      require_signed  zomato.com;
 zoomcake.com                    require_signed  zoomcake.com;
-zoom.us                         require_signed  zoom.us;
+zoom.us                         require_signed  "zoom.us,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 zooprinting.com                 require_signed  eoncode.com;
 zorpia.com                      require_signed  zorpia.com;
 zortrax.com                     require_signed  "zortrax.com,emlgrid.com";
 zywave.com                      require_signed  zywave.com;

Mercurial > dnsbl

comparison dnsbl.dkim.conf @ 462:f3f1ece619ba stable-6-0-75