diff dnsbl.dkim.conf @ 462:f3f1ece619ba stable-6-0-75

change dkim_from syntax to allow "signer1,signer2;spf data"
author Carl Byington <carl@five-ten-sg.com>
date Sat, 09 Mar 2019 18:46:25 -0800
parents d4275f26241c
children 428de28b34b7
line wrap: on
line diff
--- a/dnsbl.dkim.conf	Mon Dec 24 09:41:04 2018 -0800
+++ b/dnsbl.dkim.conf	Sat Mar 09 18:46:25 2019 -0800
@@ -1,3 +1,5 @@
+1039rxp.com                     require_signed  1039rxp-com.20150623.gappssmtp.com;
+10news.com                      require_signed  ewscripps.onmicrosoft.com;
 123g.info                       require_signed  123g.info;
 123greetings.biz                require_signed  123greetings.biz;
 123greetings.info               require_signed  123greetings.info;
@@ -12,25 +14,33 @@
 314action.com                   signed_white    bounce.bluestatedigital.com;
 314action.org                   signed_white    bounce.bluestatedigital.com;
 4imprint.com                    require_signed  4imprint.com;
-4over.com                       require_signed  carrier.4over.com;
+4over4.com                      require_signed  4over4.ccsend.com;
+4over.com                       signed_white    "carrier.4over.com,4over-com.20150623.gappssmtp.com";   // some unsigned mail
 7milesglobal.com                require_signed  7milesglobal-com.20150623.gappssmtp.com;
 8x8.com                         require_signed  8x8.com;
 a1.hilton.com                   require_signed  a1.hilton.com;
 a4m.org                         require_signed  sendgrid.info;
-aaabrasives.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+aaabrasives.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 aaas.sciencepubs.org            require_signed  aaas.sciencepubs.org;
 aa.com                          require_signed  amrcorp.onmicrosoft.com;
 aadvantage.email.aa.com         require_signed  aadvantage.email.aa.com;
-aaepa.com                       require_signed  americanacademytraining.com;
+aaepa.com                       require_signed  "aaepa.onmicrosoft.com,americanacademytraining.com";
+aaj.bulletinmedia.com           require_signed  bulletinmedia.com;
+aaj.custombriefings.com         require_signed  custombriefings.com;
 aapromo.email.aa.com            require_signed  aapromo.email.aa.com;
 aavacations.email.aa.com        require_signed  aavacations.email.aa.com;
 abbeypress.com                  require_signed  abbeypress.com;
+abc.com                         require_signed  twdc.onmicrosoft.com;
 abcomrents.com                  require_signed  abcomrents.com;
 abingtonaesthetic.com           require_signed  "yahoo.com,em.secureserver.net";
+abms.org                        require_signed  abmsref.onmicrosoft.com;
 abqchamber.com                  require_signed  icontactmail4.com;
 abt.com                         require_signed  abt-com.20150623.gappssmtp.com;
+abusheroriginal.com             require_signed  netorgft2197093.onmicrosoft.com;
 academia-mail.com               require_signed  academia-mail.com;
+access-investments.com          require_signed  access-investments.com;
 acclivitysoftware.com           require_signed  acclivitysoftware.com;
+account.blinkist.com            require_signed  account.blinkist.com;
 accountemps.com                 require_signed  roberthalf.onmicrosoft.com;
 account.kmart.com               require_signed  account.kmart.com;
 accountmanageremail.com         require_signed  accountmanageremail.com;
@@ -41,7 +51,7 @@
 accounts.google.com             require_signed  "google.com,accounts.google.com";
 accounts.paperlesspost.com      require_signed  "paperlesspost.com,*.paperlesspost.com";
 accuspeechmobile.com            require_signed  netorg112606.onmicrosoft.com;
-accutechdata.com                require_signed  accutechdatasupplies.onmicrosoft.com;
+accutechdata.com                require_signed  "accutechdata.com,accutechdatasupplies.onmicrosoft.com";
 acgov.org                       require_signed  acgov-org.20150623.gappssmtp.com;
 aclu.org                        require_signed  "aclu.org,email.aclu.org";
 aclupa.org                      require_signed  aclupa.org;
@@ -59,12 +69,14 @@
 acuityscheduling.com            require_signed  email.acuityscheduling.com;
 adcommgrp.com                   require_signed  adcommgrp-com.20150623.gappssmtp.com;
 adexchanger.com                 require_signed  adexchanger.com;
+adglow.com                      require_signed  adglow.com;
 adidasus-news.adidas.com        require_signed  adidasus-news.adidas.com;
+adlarge.com                     require_signed  adlarge.com;
 admarketing.yahoo.com           require_signed  admarketing.yahoo.com;
 adobe.com                       require_signed  "adobe.com,mktomail.com";
 adolescent.nyc                  require_signed  "cmail19.com,cmail20.com";
 adparlor.com                    require_signed  adparlor.com;
-adp.com                         require_signed  "adp.com,*.adp.com,rimagede.onmicrosoft.com";
+adp.com                         require_signed  "adp.com,*.adp.com";
 adrianacurcio.com               require_signed  emlr2.com;
 adroll.com                      require_signed  adroll.com;
 adroptions.com                  require_signed  adroptions.ccsend.com;
@@ -75,23 +87,27 @@
 adviserinvestments.com          require_signed  adviserinvestments.com;
 adv.strawberrynet.com           require_signed  adv.strawberrynet.com;
 a.email.hbr.org                 require_signed  a.email.hbr.org;
+aexp.com                        require_signed  aexp.com;
 afar.com                        require_signed  afar.com
 aflac-email.com                 require_signed  aflac-email.com;
 aflac-onlineservices.com        require_signed  aflac-onlineservices.com;
 afsc.org                        require_signed  afsc.org;
-afsp.org                        require_signed  "auth.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-againstallgrain.com             require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+afsp.org                        require_signed  "afsp.org,auth.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+againstallgrain.com             require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 agencyprotalent.com             require_signed  agencyprotalent.com;
 agent.thehartford.com           require_signed  agent.thehartford.com;
 agfa.com                        require_signed  www-agfa.ccsend.com;
 agingcare.com                   require_signed  agingcare.com;
-agoodson.com                    require_signed  "emlr2.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+agoodson.com                    require_signed  "emlr2.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 a.grubhub.com                   require_signed  a.grubhub.com;
 agu.org                         require_signed  agu.org;
 ahava.com                       require_signed  ahava.com;
+aiaa.bulletinmedia.com          require_signed  bulletinmedia.com;
 aiaa.org                        require_signed  aiaa.org;
 aiche.org                       require_signed  aiche.org;
-aiga.org                        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+aiga.org                        require_signed  "aiga.org,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+aig.com                         signed_white    aig.com;                        // some unsigned mail via messagelabs
+aim.com                         unsigned_black  "aim.com,mx.aim.com";
 airbnb.com                      require_signed  email.airbnb.com;
 airconway.com                   require_signed  airconway.ccsend.com;
 airstoc.com                     require_signed  airstoc.com;
@@ -99,47 +115,53 @@
 akc.org                         require_signed  akc.org;
 akela-partners.com              require_signed  aweber.com
 alerts.aa.com                   require_signed  alerts.aa.com;
+alerts.ally.com                 require_signed  alerts.ally.com;
 alerts.aviatormastercard.com    require_signed  alerts.aviatormastercard.com;
 alerts.barclaycardus.com        require_signed  alerts.barclaycardus.com;
-alerts.comcast.net              signed_white    alerts.comcast.net;             // comcast forwarding breaks their own signatures
+alerts.comcast.net              signed_white    alerts.comcast.net;             // comcast internal forwarding breaks their own signatures
 alerts.offers.com               require_signed  "alerts.offers.com,email.offers.com";
 alertsp.chase.com               require_signed  alertsp.chase.com;
 alerts.santander.us             require_signed  alerts.santander.us;
 alerts.skype.com                require_signed  alerts.skype.com;
 alerts.trulia.com               require_signed  alerts.trulia.com;
+alerts.usbank.com               require_signed  alerts.usbank.com;
 alexandani.com                  require_signed  alexandani.com;
 alignable.com                   require_signed  "alignable.com,invites.alignable.com";
 allaboutjazz.com                require_signed  allaboutjazz.com;
 allianceforaction.com           signed_white    allianceforaction.ccsend.com    // some unsigned mail from their servers, no spf
 alliedmg.biz                    require_signed  alliedmg.biz;
 allinoneline.com                require_signed  allinoneline.ccsend.com;
-allstarbaseballacademy.com      require_signed  allstarbaseballacademy.ccsend.com;
-allstarnutrition.us             signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+allstarbaseballacademy.com      require_signed  "allstarbaseballacademy-com.20150623.gappssmtp.com,allstarbaseballacademy.ccsend.com";
+allstarnutrition.us             signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 allstate.com                    signed_white    allstate.com;                   // some unsigned mail via allstate-mail.com not listed in their spf record
 alm.com                         require_signed  "e.alm.com,experiture.com";
 almo.com                        require_signed  icontactmail1.com;
+alpha.gr                        require_signed  alpha.gr;                       // unsigned but passes spf -all
 alpineescrow.net                require_signed  alpineescrowarrowhead.onmicrosoft.com;
 alro.com                        require_signed  "alro.com,alrocorp.onmicrosoft.com";
 altigen.com                     require_signed  zcsend.net;
 altramotion.com                 require_signed  ptgnet4.onmicrosoft.com;
 alumniclass.com                 require_signed  alumniclass.com;
-alumniclubs.columbia.edu        require_signed  columbiabusiness.onmicrosoft.com;
+alumniclubs.columbia.edu        require_signed  "alumniclubs.columbia.edu,columbiabusiness.onmicrosoft.com";
 alumni.nd.edu                   require_signed  "nd.edu,imodules.com";
 alz.org                         require_signed  "alz-org.20150623.gappssmtp.com,mta-bbcspool.convio.net,auth.ccsend.com";
+amalosangeles.org               require_signed  amalosangeles.org;
 amazoncapital.com               require_signed  amazon.com;
 amazon.ca                       require_signed  amazon.ca;
 amazon.com                      require_signed  amazon.com;
 amazon.fr                       require_signed  amazon.fr;
 amazonsellerservices.com        require_signed  amazonsellerservices.com;
+amcnetworks.com                 require_signed  "amcnetworks.com,amcnetworks.onmicrosoft.com";
+amcp.bulletinhealthcare.com     require_signed  bulletinhealthcare.com;
 amcp.custombriefings.com        require_signed  custombriefings.com;
 amcustomercare.att-mail.com     require_signed  amcustomercare.att-mail.com;
 americangreetings.com           require_signed  americangreetings.com;
 americanhotel.com               require_signed  americanhotel.com;
-americansuspension.com          require_signed  "store.smtp.bigcommerce.net,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+americansuspension.com          require_signed  "store.smtp.bigcommerce.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 americaslibertypac.com          require_signed  bluehornet.com;
 ameritas.com                    require_signed  "*.memberemail.com";
 amleo.com                       require_signed  amleo.com;
-amrevmuseum.org                 require_signed  "amrevmuseum.onmicrosoft.com,americanrevolutioncenter.ccsend.com,mta-bbcspool.convio.net";
+amrevmuseum.org                 signed_white    "amrevmuseum.onmicrosoft.com,americanrevolutioncenter.ccsend.com,mta-bbcspool.convio.net";  // some unsigned mail via blackbaud
 ams-cc.com                      require_signed  ams-cc.com;
 am.sony.com                     signed_white    sony.onmicrosoft.com;           // some unsigned mail via lightpath
 a.narrativemagazine.com         require_signed  a.narrativemagazine.com;
@@ -149,16 +171,19 @@
 anpanama.com                    require_signed  anpanama.com;
 anthempropane.com               require_signed  anthempropane.com;
 anthemww.com                    require_signed  matw.onmicrosoft.com
+aol.com                         unsigned_black  "aol.com,mx.aol.com";
+aol.de                          unsigned_black  aol.de;
+aol.fr                          unsigned_black  aol.fr;
 apgrents.com                    require_signed  icontactmail6.com;
-aplaceformom.com                require_signed  aplaceformom.com;
+aplaceformom.com                require_signed  "aplaceformom.com,aplaceformom.onmicrosoft.com";
 app.bamboohr.com                require_signed  app.bamboohr.com;
 apple.com                       require_signed  apple.com;
 applemusic.com                  require_signed  applemusic.com;
 appliednet.com                  require_signed  "mktomail.com,mktroute.com";
 app.production.membersuite.com  require_signed  sendgrid.info;
-appsheet.com                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+appsheet.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 appulatemail.com                require_signed  appulatemail.com;
-aquafadas.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+aquafadas.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 archpaper.com                   signed_white    archpaper.ccsend.com;           // some unsigned mail via listrak
 armsanctuary.org                require_signed  mta-bbcspool.convio.net;
 arthurhall.com                  require_signed  arthurhallins.onmicrosoft.com;
@@ -167,12 +192,13 @@
 artmaterialsonline.com          require_signed  artmaterialsonline.com;
 artnet.com                      signed_white    artnet.com;                     // some unsigned mail via their own servers
 artrenewal.org                  signed_white    artrenewal.ccsend.com;          // some unsigned mail via their own servers with no spf record
+artstation.com                  require_signed  "artstation.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 artsusa.org                     require_signed  bounce.bluestatedigital.com;
 asana.com                       require_signed  asana.com;
 ascot.co.uk                     require_signed  ascot.co.uk;
 asianskygroup.com               require_signed  asianskygroup.com;
 asicentral.com                  require_signed  asicentral.com;
-asimplertime.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+asimplertime.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 asisignage.com                  require_signed  icontactmail4.com;
 askaspn.com                     require_signed  genius-network.com;
 associationvoice.com            require_signed  associationvoice.com;
@@ -184,12 +210,15 @@
 atautosbdc.com                  require_signed  sg01.motosnap.com;
 atdcd-media.com                 require_signed  atdcd-media.com;
 athero.org                      require_signed  "*.musvc.com";
+attn.com                        require_signed  attn.com;
 att.tm00.com                    require_signed  tm00.com;
+aubergeresorts.com              require_signed  aubergeresorts.com;
 audible.com                     require_signed  audible.com;
 audicommunication.com           require_signed  audicommunication.com;
 audiencerewards.com             require_signed  audiencerewards.com;
+audubon.org                     require_signed  audubon.org;
 autodeskcommunications.com      require_signed  autodeskcommunications.com;
-autonomous.ai                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+autonomous.ai                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 avalonflooring.com              signed_white    "nf157.n-email.net,nf156.n-email.net";  // some unsigned mail from their own servers
 avangate.com                    require_signed  avangate.com;
 avanteducation.com              require_signed  avanteducation.com;
@@ -197,7 +226,7 @@
 azureemail.microsoft.com        require_signed  azureemail.microsoft.com;
 backupify.com                   require_signed  backupify.com;
 bacnyc.org                      require_signed  bacnyc.ccsend.com;
-baltimorecomiccon.com           require_signed  baltimorecomiccon.ccsend.com;
+baltimorecomiccon.com           require_signed  "baltimorecomiccon-com.20150623.gappssmtp.com,baltimorecomiccon.ccsend.com";
 bamboohr.com                    require_signed  bamboohr.com;
 bankofamerica.com               require_signed  bankofamerica.com;
 bankofinternet.com              require_signed  bankofinternet.com;
@@ -205,6 +234,7 @@
 bartlettbearing.com             require_signed  "bartlettbearing.onmicrosoft.com,auth.ccsend.com";
 basspronews.com                 require_signed  basspronews.com;
 basusa.com                      signed_white    myenrollservices.onmicrosoft.com;   // some unsigned mail from their own servers with no spf record
+bayard-inc.com                  require_signed  "bayard.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 bbdo.com                        require_signed  bbdo.com;
 bbofpa.com                      require_signed  bbofpa.ccsend.com;
 bccsoftware.com                 signed_white    "bccsoftware.onmicrosoft.com,email.clickdimensions.com";    // some unsigned from their own servers
@@ -229,10 +259,14 @@
 bgeneral.com                    signed_white    bgeneral.com;                   // some unsigned mail via bgeneral.com
 bhfs.com                        signed_white    "bhfs.com,brownsteinhyattfarberschreck.onmicrosoft.com";    // temp errors, 0 bit key
 biblicalarchaeology.org         require_signed  biblicalarchaeology.wc08.net;
-billdove.com                    require_signed  billdove.com;                   // never signed, but must pass spf
+bicycleadventures.com           require_signed  bicycleadventures.ccsend.com;
+bidsync.com                     require_signed  bidsync.com;
+bigyam.com                      require_signed  bigyam.com;
+billdove.com                    require_signed  billdove.com;                   // unsigned mail should pass spf -all
 billerportal.com                require_signed  billerportal.com;
 billing01.email-allstate.com    require_signed  billing01.email-allstate.com;
 billpay.bankofamerica.com       require_signed  billpay.bankofamerica.com;
+billups.com                     require_signed  billups.com;
 bingads.com                     require_signed  bingads.com;
 bio.org                         require_signed  bio.org;
 birdiebug.com                   require_signed  birdiebug.com;
@@ -242,6 +276,7 @@
 bizbash.com                     require_signed  "bizbash.com,wixshoutout.com";
 bizbuysell.com                  require_signed  bizbuysell.com;
 bizdevworkshops.com             require_signed  cvent-planner.com;
+blacked.com                     require_signed  blacked.com;
 blueapron.com                   require_signed  blueapron.com;
 bluedge.com                     require_signed  "bluedge.com,nri605.onmicrosoft.com";
 blueshoreproperties.com         require_signed  icontactmail2.com;
@@ -250,10 +285,11 @@
 bma1.com                        require_signed  "bma1-com.20150623.gappssmtp.com,reply.onehub.com";
 bmj.com                         require_signed  bmj.com;
 bmwfs.com                       require_signed  bmwfs.com;
-bmwofdevon.com                  require_signed  xtime.com;
-bmwofmtlaurel.com               require_signed  xtime.com;
+bmwofdevon.com                  signed_white    xtime.com;                      // unsigned mail via emailsrvr with no spf record
+bmwofmtlaurel.com               signed_white    xtime.com;                      // unsigned mail via autopoint.com
 bnbestimating.com               require_signed  bnbestimating-com.20150623.gappssmtp.com;
 bnind.com                       require_signed  bnind.onmicrosoft.com;
+bnymellon.com                   require_signed  bnymellon.com;
 boatus.com                      require_signed  boatus.wc08.net;
 bobcasey.com                    signed_white    bounce.bluestatedigital.com;
 boldexperts.net                 require_signed  boldexperts-net.20150623.gappssmtp.com;
@@ -264,6 +300,7 @@
 booking.com                     require_signed  "booking.com,sg.booking.com";
 bossard.com                     require_signed  bosnet.onmicrosoft.com;
 bounces.amazon.com              require_signed  amazon.com;
+bovitzinc.com                   require_signed  bovitzinc.onmicrosoft.com;
 box.com                         require_signed  box.com;
 boxed.com                       require_signed  boxed.com;
 boydsphila.com                  require_signed  boydsphila.ccsend.com;
@@ -271,15 +308,17 @@
 braceshop.com                   require_signed  braceshop.com;
 brandshare.us                   require_signed  brandshare.onmicrosoft.com
 brandywine.org                  signed_white    brandywineconservancyandmuseumofart.ccsend.com;     // some unsigned mail directly from their server on fios.verizon
-brenthaven.com                  require_signed  "brenthaven.com,*.mailsdlvrd.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+brenthaven.com                  require_signed  "brenthaven.com,*.mailsdlvrd.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 bridgemailsystem.com            require_signed  bridgemailsystem.com;
 britemg.com                     require_signed  advertickets.onmicrosoft.com;
 broadcaster3.medpagetoday.com   require_signed  broadcaster3.medpagetoday.com;
+broadmoor.com                   require_signed  broadmoor.com;
 brooklynmuseum.org              require_signed  brooklynmuseum.org;
 brrice.edu                      require_signed  brrice.edu;
 brucebrown.com                  require_signed  emlr2.com;
 brumark.com                     signed_white    exploring.ccsend.com;           // unsigned mail from exploring.com, no spf record
-b.strapworks.com                require_signed  triggermail.io;
+bsrreporting.com                require_signed  bsrreporting.com;
+b.strapworks.com                require_signed  "sendgrid.net,triggermail.io,*.klaviyomail.com";
 bthechange.com                  require_signed  "bthechange-com.20150623.gappssmtp.com,mequoda-btc.wc08.net";
 b.tigerdirect.com               require_signed  tigerdirect.com;
 buckscountyherald.com           require_signed  aweber.com;
@@ -293,13 +332,15 @@
 businessmanagementdaily.com     require_signed  businessmanagementdaily.com;
 bustle.com                      require_signed  bustle.com;
 b.us.underarmour.com            require_signed  "*.underarmour.com";
-buykud.com                      require_signed  "buykud.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+buykud.com                      require_signed  "buykud.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+buzzfeed.com                    require_signed  buzzfeed.com;
 cadsourcing.com                 require_signed  cadsourcing-com.20150623.gappssmtp.com;
 cafarogreenleaf.com             require_signed  cafarogreenleaf.ccsend.com;
 cafepress.com                   require_signed  cafepressinc.onmicrosoft.com;
 calbt.com                       require_signed  email-od.com;
 calendly.com                    require_signed  calendly.com;
 callforentry.org                require_signed  callforentry.org;
+callrail.com                    require_signed  callrail.com;
 calparks.org                    require_signed  mta-bbcspool.convio.net;
 calvaryabq.org                  require_signed  calvaryabq.org;
 camasb.org                      signed_white    camasb.org;                     // some unsigned mail via coxmail that fails spf
@@ -309,8 +350,9 @@
 capbluecross.com                require_signed  cvent-planner.com;
 capemaymac.org                  require_signed  capemaymac.ccsend.com;
 capitaloneemail.com             require_signed  capitaloneemail.com;
-caratsandcake.com               require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-care.comcast.com                require_signed  care.comcast.com;
+caratsandcake.com               require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+card-e.em.discover.com          require_signed  card-e.em.discover.com;
+care.comcast.com                signed_white    "care.comcast.com,mdp.comcast.net"; // sending mail with broken signatures
 careersinfosecurity.com         require_signed  careersinfosecurity.com;
 caregiveraction.org             require_signed  caregiveraction.org;
 care.gotomypc.com               require_signed  care.gotomypc.com;
@@ -321,7 +363,7 @@
 catholiccompany.com             require_signed  catholiccompany.com;
 cbginc.com                      require_signed  cbginc-com.20150623.gappssmtp.com;
 cbldf.org                       signed_white    "nationsend6.com,nationsend14.com,nationsend17.com";
-cbp.dhs.gov                     require_signed  cbpgov.onmicrosoft.com;
+cbp.dhs.gov                     require_signed  "cbp.dhs.gov,cbpgov.onmicrosoft.com";
 cbre.com                        signed_white    mailsvr.com;                    // some unsigned mail via ms *.outlook.com not listed in spf record
 cbs.com                         require_signed  "cbs.onmicrosoft.com,recurly.com";
 cbsd.org                        signed_white    cbsd.onmicrosoft.com;           // some unsigned mail via notification.com fails spf with -all
@@ -329,6 +371,7 @@
 cbslocal.com                    require_signed  cbslocal.com;
 cbsnewsletter.com               require_signed  cbsnewsletter.com;
 cbsradio.com                    require_signed  cbs.onmicrosoft.com;
+cc.aol.com                      require_signed  cc.aol.com;
 cc.att-mail.com                 require_signed  cc.att-mail.com;
 cc.binders.com                  require_signed  binders.com;
 cchcpelink.com                  require_signed  cchcpelink.com;
@@ -346,12 +389,14 @@
 cerner.com                      require_signed  cerner.com;                 // client of mediasupply
 cestrong.com                    require_signed  archpaper.ccsend.com;
 cfostudio.com                   require_signed  cvent-planner.com;
-chambermusicinstitute.com       require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+chairmanmom.com                 require_signed  chairmanmom.com;
+chambermusicinstitute.com       require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 change.jetblue.com              require_signed  change.jetblue.com;
 change.org                      signed_white    change.org;                 // some unsigned mail via exacttarget
+channelfactory.com              require_signed  channelfactory-com.20150623.gappssmtp.com;
 charlesmichaelphotography.com   require_signed  emlr2.com;
 checkin.email.aa.com            require_signed  checkin.email.aa.com;
-chocolateammo.com               require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+chocolateammo.com               require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 chownow.com                     require_signed  chownow.com;
 chriscoons.com                  signed_white    bounce.bluestatedigital.com;
 chrismurphy.com                 require_signed  chrismurphy.com;
@@ -363,6 +408,7 @@
 ciscospark.com                  require_signed  mail-a.ciscospark.com;
 citibank.com                    require_signed  citibank.com;
 citicorp.com                    require_signed  citicorp.com;
+citizensbank.com                require_signed  citizensbank.com;               // should pass spf
 citizensbankonline.com          require_signed  citizensbankonline.com;         // unsigned mail but it passes spf
 citrix.com                      signed_black    qemailserver.com;               // survey spam
 citrixonline.com                require_signed  citrixonline.com;
@@ -373,10 +419,14 @@
 citywideloan.net                require_signed  citywideloan.net;
 civiliandefensesystems.com      require_signed  civiliandefensesystems-com.20150623.gappssmtp.com
 ciweb.org                       require_signed  chautauquainstitution.onmicrosoft.com;
+cjspianos.com                   require_signed  cjspianos-com.20150623.gappssmtp.com;
+claims.usaa.com                 require_signed  usaa.com;
+claritas.com                    require_signed  claritasllc.onmicrosoft.com;
 classicspecs.com                require_signed  classicspecs.com;
 clddigital.com                  require_signed  cldgraphics.onmicrosoft.com;
 cleanrouter.com                 require_signed  "*.cleanrouter.com";
 cleanwater.org                  require_signed  mail.salsalabs.net;
+clearchannel.com                require_signed  clearchannel.com;
 clearlaws.com                   require_signed  clearlaws.com;
 click.dandb.com                 require_signed  click.dandb.com;
 clickerdogs.com                 require_signed  clickerdogs.com;
@@ -384,7 +434,7 @@
 climber.com                     require_signed  climber.com;
 clothingline.com                require_signed  clothingline.ccsend.com;
 cloud.carbonite.com             require_signed  cloud.carbonite.com;
-clover.com                      require_signed  clover.com;
+clover.com                      signed_white    clover.com;                     // some unsigned mail via salesforce
 cmail.dickblick.com             require_signed  cmail.dickblick.com;
 cmclibrary.org                  require_signed  capemaycountylibrary.onmicrosoft.com;
 cm.directv.com                  require_signed  cm.directv.com;
@@ -409,9 +459,10 @@
 communication.microsoft.com     require_signed  communication.microsoft.com;
 communication.ruelala.com       require_signed  communication.ruelala.com;
 communications.meredith.com     require_signed  communications.meredith.com;
+communications.onekingslane.com require_signed  communications.onekingslane.com;
 compressionsale.com             signed_white    icontactmail2.com;              // some unsigned mail via their own servers
 concur.com                      require_signed  sap.onmicrosoft.com;
-conferencegroup.com             signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+conferencegroup.com             signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 connectedcommunity.org          require_signed  connectedcommunity.org;
 connect.match.com               require_signed  connect.match.com;
 connect.sundancecatalog.com     require_signed  connect.sundancecatalog.com;
@@ -426,13 +477,16 @@
 contractimprint.com             require_signed  criticalimpactinc.com;
 cookwoods.com                   require_signed  cookwoods.ccsend.com;
 cooperhealth.org                require_signed  cooperhealth.org;
+copyblogger.com                 signed_white    mail.feedblitz.com;             // some unsigned password resets
 corcexpo.com                    require_signed  "corcexpo-com.20150623.gappssmtp.com,corcexpo.ccsend.com";
 cornell.edu                     signed_white    hubspot.com;                    // Cornell Lab of Ornithology via hubspot
 co.rockland.ny.us               require_signed  countyofrockland.onmicrosoft.com;
 corp.lawyer.com                 require_signed  "lawyer.com,referrals.lawyer.com";
 corporate-interiors.com         require_signed  corporate-interiors.ccsend.com;
 covertside.net                  require_signed  icontactmail6.com;
-cpcstrategy.com                 require_signed  cpcstrategy-com.20150623.gappssmtp.com;
+coxinc.com                      require_signed  coxinc.com;
+coyote.com                      require_signed  coyote365.onmicrosoft.com;
+cpcstrategy.com                 signed_white    cpcstrategy-com.20150623.gappssmtp.com; // some unsigned invoices via intacct.com
 cpgmatters.com                  require_signed  cpgmatters.ccsend.com;
 cpiinternational.com            require_signed  "vtiger.email,emcan1.vtigermail.com";
 cpucommunication.com            require_signed  cpucommunication.com;
@@ -444,15 +498,16 @@
 crcind.com                      require_signed  crcglobal.onmicrosoft.com;
 create.paper-source.com         require_signed  create.paper-source.com;
 creativecircle.com              signed_white    creativecircle.onmicrosoft.com; // some unsigned mail
-creativegroup.com               require_signed  "roberthalf.onmicrosoft.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+creativegroup.com               require_signed  "roberthalf.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 creativelive.com                require_signed  creativelive.com;
 creativemag.com                 signed_white    creativemagazine.ccsend.com;    // some unsigned mail via gmail
+creditjourney.chase.com         require_signed  creditjourney.chase.com;
 creditkarma.com                 require_signed  creditkarma.com;
 credit.paypal.com               require_signed  credit.paypal.com;
 credoaction.com                 require_signed  "credoaction.com,controlshiftlabs.com";
 crexi.com                       require_signed  crexi.com;
 crlnews.com                     require_signed  "omktmail2.com,icontactmail1.com,icontactmail9.com";
-csa.canon.com                   require_signed  "mktomail.com,mktdns.com,mktosender.com";
+csa.canon.com                   require_signed  "mktroute.com,mktomail.com,mktdns.com,mktosender.com";
 c-sgroup.com                    require_signed  c-sgroup.com;
 csifoodpro.com                  require_signed  csifoodpro.ccsend.com;
 csmail.peoplefinders.com        require_signed  csmail.peoplefinders.com;
@@ -467,20 +522,24 @@
 customerassist.bankofamerica.com require_signed  customerassist.bankofamerica.com;
 customer.box.com                require_signed  customer.box.com;
 customer.usps.com               require_signed  customer.usps.com;
-customink.com                   require_signed  customink.com;
+customink.com                   require_signed  "customink.com,*.customink.com";
 cutleryandmore.com              require_signed  cutleryandmore.com;
 cwf.org                         require_signed  cwfoundation.onmicrosoft.com;
 d2em.microsoft.com              require_signed  d2em.microsoft.com;
+d2pmagazine.com                 require_signed  d2pmagazine.com;
 dackconsulting.com              require_signed  "dackconsulting.onmicrosoft.com,vrmailer3.com";
 dailydeals.snoothmail.com       require_signed  mg.snoothmail.com;
 dailykos.com                    require_signed  sg.actionnetwork.org;
 dailyleak.club                  require_signed  dailyleak.club;
 daily.ozy.com                   require_signed  daily.ozy.com;
+dallasarboretum.org             require_signed  "dallasarboretum.onmicrosoft.com,auth.ccsend.com";
 dandh.com                       signed_white    email.clickdimensions.com;      // unsigned mail from their own servers with no spf
 darkironfitness.com             signed_white    aweber.com;                     // some broken signatures from aweber that fail spf
 dasd.org                        signed_white    "bbnotify.net,infosnap.com";    // some unsigned mail via bbnotify
+dashlane.com                    require_signed  dashlane.com;
 databreachtoday.com             require_signed  databreachtoday.com;
-davidfrancisfurniture.com       require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+datadist.com                    require_signed  datadist.com;                   // unsigned mail should pass spf -all
+davidfrancisfurniture.com       require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 davidsuzuki.org                 require_signed  davidsuzuki.org;
 davios.com                      require_signed  www-davios.ccsend.com;
 dayrunner.com                   require_signed  dayrunner.com;
@@ -489,6 +548,7 @@
 dcmkt.com                       require_signed  dcmkt.com;
 dd.delta.org                    require_signed  dd.delta.org;
 dealer.onstation.com            require_signed  dealer.onstation.com;
+deals.adamandeve.com            require_signed  deals.adamandeve.com;
 deals.priceline.com             require_signed  deals.priceline.com;
 defenseleadershipforum.org      require_signed  icontactmail2.com;
 deigroup.com                    require_signed  yahoo.com;
@@ -499,6 +559,7 @@
 demandprogress.org              require_signed  demandprogress.org;
 democraticags.org               require_signed  bounce.bluestatedigital.com;
 democrats.org                   require_signed  democrats.org;
+dentalappointments.cigna.com    require_signed  dentalappointments.cigna.com;
 depaceminterris.org             signed_white    icontactmail4.com;              // some unsigned mail arriving from comcast servers
 dep.nj.gov                      require_signed  sonj.onmicrosoft.com;
 designandconstructionweek.com   require_signed  designandconstructionweek.com;
@@ -508,23 +569,26 @@
 dhl.com                         require_signed  dhl.com;
 diabetes.org                    require_signed  mta-bbcspool.convio.net;
 dialpad.com                     require_signed  dialpad.com;
+diamondcu.com                   require_signed  diamondcu.com;
 diamondmm.com                   require_signed  icontactmail3.com;
+dickblick.com                   signed_white    artstores.com;
 dieselpowergear.com             require_signed  "dieselpowergear.com,cmail19.com,cmail20.com";
 digdev.com                      require_signed  digdevdirect.onmicrosoft.com;
 digest.producthunt.com          require_signed  digest.producthunt.com;
 dimensiondesign.com             require_signed  "mx-senderer-02.com,mx-senderer-03.com";
 dimin.com                       require_signed  dimin-com.20150623.gappssmtp.com;
-diocesan.com                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+diocesan.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 directbuy.com                   require_signed  directbuy.com;
 direct.mercurynews.com          require_signed  direct.mercurynews.com;
 directoryofillustration.com     require_signed  directoryofillustration.com;
-directvote.net                  require_signed  smtpsendmail.com;
+directvote.net                  require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 discogs.com                     require_signed  discogs.com;
 discountschoolsupply.com        require_signed  discountschoolsupply.com;
 discoverphl.com                 require_signed  discoverphl.com;
-discovery.com                   require_signed  discoverycomm.onmicrosoft.com;
+discovery.com                   signed_white    discoverycomm.onmicrosoft.com;  // some unsigned mail via scrippsnetworks.com
 discover.zinio.com              require_signed  discover.zinio.com;
 dishemail.com                   require_signed  dishemail.com;
+disney.com                      require_signed  twdc.onmicrosoft.com;
 ditech-notify.com               require_signed  ditech-notify.com;
 divenewsletter.com              require_signed  divenewsletter.com;
 diversityagenda.com             require_signed  theconferencecenter.ccsend.com;
@@ -532,22 +596,25 @@
 dlsdiscovery.net                require_signed  dlsdiscovery.net;
 dmgiant.del2.com                require_signed  del2.com;
 dmrgraphics.com                 require_signed  netorgft3071376.onmicrosoft.com;
+dnaseattle.com                  require_signed  dnaseattle.onmicrosoft.com;
 dnb.com                         require_signed  dnb.com;
 dnc.com                         require_signed  dnc.com;
 dnc.org                         require_signed  dnc.org;
 doa.nc.gov                      require_signed  doa.nc.gov;
 docusign.com                    require_signed  docusign.com;
+docusign.net                    require_signed  docusign.net;
 doelegal.com                    require_signed  doelegal.com;
 dogseminarsdirectory.com        require_signed  doggiemanners.ccsend.com;
 dola.com                        require_signed  "dola.com,dola-com.20150623.gappssmtp.com";
 dolenutritionnews.com           require_signed  dolenutritionnews.com;
-dolphinproject.com              require_signed  sg.actionnetwork.org;
+dolphinproject.com              require_signed  "*.actionnetwork.org";
 donaldjtrump.com                require_signed  donaldjtrump.com;
 donaldson.com                   require_signed  donaldson.onmicrosoft.com;
-doodle.com                      require_signed  e.doodle.com;
-dor.state.ma.us                 signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+doodle.com                      require_signed  "e.doodle.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+doordash.com                    signed_white    doordash.com;                   // some unsigned mail via salesforce
+dor.ga.gov                      require_signed  dor.ga.gov;
+dor.state.ma.us                 signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 dpreview.com                    require_signed  dpreview.com;
-dreamstime.com                  require_signed  dreamstime.com;
 drexel.edu                      require_signed  "drexel0.onmicrosoft.com,www-drexel.ccsend.com,imodules.com";
 drfmail.com                     require_signed  drfmail.com;
 drobo.com                       require_signed  drobo.com;
@@ -555,12 +622,13 @@
 dropboxmail.com                 require_signed  dropboxmail.com;
 drpa.org                        require_signed  "drpapatco.onmicrosoft.com,drpapatco.ccsend.com";
 drsfostersmith.com              require_signed  drsfostersmith.com;
-drwc.org                        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+drwc.org                        require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 dscc.org                        signed_white    dscc.org;                       // some unsigned mail via bluestatedigital
 dslgroup.com                    require_signed  dslgroup.ccsend.com;            // needs spf for some unsigned mail from their own servers
 ducotech.com                    signed_white    ducotech.ccsend.com;            // some unsigned mail from their own servers
 dullesmetro.com                 require_signed  dullesmetro.ccsend.com;
 duluthtradingemail.com          require_signed  duluthtradingemail.com;
+duncanchannon.com               require_signed  duncanchannon-com.20150623.gappssmtp.com;
 dunnemanning.com                require_signed  dunnemanning-com.20150623.gappssmtp.com;
 dvd.com                         require_signed  dvd.com;
 dvfbc.com                       require_signed  dvfbc.ccsend.com;
@@ -578,7 +646,8 @@
 ealogistics.com                 require_signed  "ealogistics1.onmicrosoft.com,ealogistics.ccsend.com";
 e.appleseeds.com                require_signed  e.appleseeds.com;
 eastsideco.com                  require_signed  eastsideco.com;
-eastwood.com                    require_signed  eastwood.com;
+eastwood.com                    signed_white    eastwood.com;                   // unsigned mail from their own web servers fails strong spf
+easy.staplesadvantage.com       require_signed  easy.staplesadvantage.com;
 easy.staples.com                require_signed  easy.staples.com;
 easywoodtools.com               require_signed  easywoodtools.ccsend.com;
 eat24.com                       require_signed  eat24.com;
@@ -590,7 +659,7 @@
 e.berries.com                   require_signed  e.berries.com;
 e.bevmo.com                     require_signed  e.bevmo.com;
 e.bloomingdales.com             require_signed  e.bloomingdales.com;
-e.blueapron.com                 require_signed  e.blueapron.com;
+e.blueapron.com                 require_signed  "blueapron.com,e.blueapron.com";
 e.borrowlenses.com              require_signed  e.borrowlenses.com;
 e.budget.com                    require_signed  e.budget.com;
 e.build.com                     require_signed  e.build.com;
@@ -600,7 +669,7 @@
 ecerts.americanexpress.com      require_signed  ecerts.americanexpress.com;
 e.chase.com                     require_signed  e.chase.com;
 echosign.com                    require_signed  echosign.com;
-e.clarksusa.com                 require_signed  "e.clarksusa.com,bounceexchange.com";
+e.clarksusa.com                 signed_white    "e.clarksusa.com,bounceexchange.com";   // some unsigned mail via exacttarget
 eclinicalmail.com               require_signed  eclinicalmail.com;
 eclipsegr.com                   require_signed  eclipsegr-com.20150623.gappssmtp.com;
 e.colehaan.com                  require_signed  e.colehaan.com;
@@ -611,18 +680,20 @@
 economist.com                   require_signed  economist.com;
 e.constantcontact.com           require_signed  e.constantcontact.com;
 e.copart.com                    require_signed  e.copart.com;
-e.crainalerts.com               require_signed  e.crainalerts.com;
 ecrmemail.verizonwireless.com   require_signed  verizonwireless.com;
 e.customink.com                 require_signed  e.customink.com;
+e.dailysales.com                require_signed  e.dailysales.com;
 edelivery.citi.com              require_signed  edelivery.citi.com;
 e.delta.com                     require_signed  e.delta.com;
 e.deluxe.com                    require_signed  e.deluxe.com;
+edencollective.co               require_signed  edencollective-co.20150623.gappssmtp.com;
 edgewaternetworks.com           require_signed  edgewaternetworks.com;
 ed.gov                          require_signed  "ed.gov,*.ed.gov";
 e.digikey.com                   require_signed  e.digikey.com;
 e.discover.com                  require_signed  e.discover.com
 e.disneyinteractive.com         require_signed  e.disneyinteractive.com;
 e.doverpublishing.com           require_signed  e.doverpublishing.com;
+e.drapers.com                   require_signed  e.drapers.com;
 e.drugstore.com                 require_signed  e.drugstore.com;
 edu.cpaacademy.org              require_signed  edu.cpaacademy.org;
 e.ea.com                        require_signed  e.ea.com;
@@ -641,6 +712,7 @@
 efi.com                         require_signed  efi.com;
 e.fitbit.com                    require_signed  e.fitbit.com;
 efolder.net                     require_signed  mktroute.com;
+e.freepeople.com                require_signed  e.freepeople.com;
 e.gamestop.com                  require_signed  e.gamestop.com;
 e.geappliances.com              require_signed  e.geappliances.com;
 e.gogoair.com                   require_signed  e.gogoair.com;
@@ -652,6 +724,7 @@
 e.grubhub.com                   require_signed  e.grubhub.com;
 e.healthandwellnessalerts.berkeley.edu require_signed  e.healthandwellnessalerts.berkeley.edu;
 e.highlights.com                require_signed  e.highlights.com;
+e.hollywoodreporter.com         require_signed  e.hollywoodreporter.com;
 e.homechef.com                  require_signed  e.homechef.com;
 e.hotwire.com                   require_signed  e.hotwire.com;
 e.hyatt.com                     require_signed  e.hyatt.com;
@@ -674,10 +747,11 @@
 elmlogistics.com                require_signed  elmlogistics.ccsend.com;
 e.lordandtaylor.com             require_signed  e.lordandtaylor.com;
 e.lowes.com                     require_signed  e.lowes.com;
-elsevier.com                    require_signed  elsevier.com;
-elsoln1.com                     require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+elsevier.com                    signed_white    elsevier.com;                   // some unsigned receipts via beechglen.com
+elsoln1.com                     require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 e.luckybrand.com                require_signed  e.luckybrand.com;
 e.lumberliquidators.com         require_signed  e.lumberliquidators.com;
+elzufon.com                     require_signed  elzufon.com;
 em.1800flowers.com              require_signed  em.1800flowers.com;
 em.adweek.com                   require_signed  em.adweek.com;
 email1.avery.com                require_signed  email1.avery.com;
@@ -699,9 +773,11 @@
 email.aegeanair.com             require_signed  email.aegeanair.com;
 email.alignable.com             require_signed  "*.alignable.com";
 email.allrecipes.com            require_signed  email.allrecipes.com;
+email.alm.com                   require_signed  email.alm.com;
 email.amc.com                   require_signed  email.amc.com;
 email.americanexpress.com       require_signed  email.americanexpress.com;
 email.americangreetings.com     require_signed  email.americangreetings.com;
+email.amexgiftcard.com          require_signed  email.amexgiftcard.com;
 e-mail.amtrak.com               require_signed  e-mail.amtrak.com;
 email.ancestry.com              require_signed  email.ancestry.com;
 email.anthem.com                require_signed  email.anthem.com;
@@ -716,7 +792,9 @@
 email.bbc.com                   require_signed  email.bbc.com;
 emailbedbathandbeyond.com       require_signed  emailbedbathandbeyond.com;
 email.bjs.com                   require_signed  email.bjs.com;
+email.bostonglobe.com           require_signed  email.bostonglobe.com;
 email.box.com                   require_signed  "email.box.com,mktdns.com";
+emailbuybuybaby.com             unsigned_black  emailbuybuybaby.com;
 email.caesars-marketing.com     require_signed  email.caesars-marketing.com;
 email.calphalon.com             require_signed  email.calphalon.com;
 email.cbssports.com             require_signed  email.cbssports.com;
@@ -724,6 +802,7 @@
 email.cheaptickets.com          require_signed  email.cheaptickets.com;
 email.chop.edu                  require_signed  email.chop.edu;
 emailchristmastreeshops.com     require_signed  emailchristmastreeshops.com;
+email.clarksusa.com             require_signed  email.clarksusa.com;
 email.coldwatercreek.com        require_signed  coldwatercreek.com;
 emailcoldwatercreek.com         require_signed  emailcoldwatercreek.com;
 email.comcastsportsnet.com      require_signed  email.comcastsportsnet.com;
@@ -760,6 +839,7 @@
 email.foodandwine.com           require_signed  email.foodandwine.com;
 email.food.com                  require_signed  email.food.com;
 email.foodnetwork.com           require_signed  email.foodnetwork.com;
+email.frame.io                  require_signed  email.frame.io;
 email.furnacecreekresort.com    require_signed  email.furnacecreekresort.com;
 email.gaiam.com                 require_signed  "email.gaiam.com,pmta.sailthru.com";
 email-galls.com                 require_signed  email-galls.com;
@@ -779,15 +859,17 @@
 email.highmarkhealth.com        require_signed  email.highmarkhealth.com;
 email.homedepot.com             require_signed  email.homedepot.com;
 email-honeywell.com             require_signed  email-honeywell.com;
+email.horizonblue.com           require_signed  email.horizonblue.com;
 email.hpconnected.com           require_signed  email.hpconnected.com;
 email.hsn.com                   require_signed  email.hsn.com;
 email.iamsinc.com               require_signed  iamsinc.com;
 emailinfo.bestbuy.com           require_signed  emailinfo.bestbuy.com;
+email.insideradio.com           require_signed  email.insideradio.com;
 email.jackfrostnational.com     require_signed  email.jackfrostnational.com;
 email.jacquielawson.com         require_signed  email.jacquielawson.com;
 email.jcrew.com                 require_signed  email.jcrew.com;
 email.jetblue.com               require_signed  email.jetblue.com;
-email.joistapp.com              require_signed  "mandrillapp.com,email.joistapp.com";
+email.joistapp.com              require_signed  "mandrillapp.com,mailchimpapp.net,email.joistapp.com";
 email.justflyemail.com          require_signed  email.justflyemail.com;
 email.kqed.org                  require_signed  email.kqed.org;
 email.laithwaiteswine.com       require_signed  email.laithwaiteswine.com;
@@ -801,6 +883,7 @@
 email.livenation.com            require_signed  email.livenation.com;
 email.livestrong.com            require_signed  livestrong.com;
 email-marriott.com              require_signed  email-marriott.com;
+email.merchantcenter.intuit.com require_signed  notification.intuit.com;
 email.microsoftonline.com       require_signed  email.microsoftonline.com;
 email.microsoftrewards.com      require_signed  email.microsoftrewards.com;
 email-modells.com               require_signed  "bounceexchange.com,email-modells.com";
@@ -813,6 +896,7 @@
 email.naviance.com              require_signed  email.naviance.com;
 email.newegg.com                require_signed  email.newegg.com;
 email.newpig.com                require_signed  email.newpig.com;
+email.newyorktimes.com          require_signed  email.newyorktimes.com;
 email.nick.com                  require_signed  email.nick.com;
 email-nmss.org                  require_signed  email-nmss.org;
 email.norton.com                require_signed  email.norton.com;
@@ -833,6 +917,7 @@
 email-petsmart.com              require_signed  email-petsmart.com;
 email.petvalu.com               require_signed  email.petvalu.com;
 email-philly.com                require_signed  email-philly.com;
+email.photo.walgreens.com       require_signed  email.photo.walgreens.com;
 email.quickenloans.com          require_signed  email.quickenloans.com;
 email.renttherunway.com         require_signed  email.renttherunway.com;
 email.republicservices.com      require_signed  email.republicservices.com;
@@ -867,6 +952,7 @@
 emails.nixle.com                require_signed  "emails.nixle.com,smtp.nixle.com";
 emails.nwruk.com                require_signed  emails.nwruk.com;
 email.sonyentertainmentnetwork.com require_signed  email.sonyentertainmentnetwork.com;
+emails.opentable.com            require_signed  emails.opentable.com;
 emails.pitneybowes.com          require_signed  emails.pitneybowes.com;
 email.sportsline.com            require_signed  email.sportsline.com;
 emails.rakuten.com              require_signed  emails.rakuten.com;
@@ -878,13 +964,14 @@
 emails.touchofclass.com         require_signed  touchofclass.com;
 emails.underarmour.com          require_signed  emails.underarmour.com;
 email.supermediastore.com       require_signed  email.supermediastore.com;
-emails.ups.com                  require_signed  ups.com;
+emails.ups.com                  require_signed  "emails.ups.com,ups.com";
 emails.williamsandkent.com      require_signed  emails.williamsandkent.com;
 emails.wyndhamhotelgroup.com    require_signed  emails.wyndhamhotelgroup.com;
 e-mails.wyndhamrewards.com      require_signed  e-mails.wyndhamrewards.com;
 emails.xfinity.com              require_signed  emails.xfinity.com;
 email.targetportraits.com       require_signed  email.targetportraits.com;
 email.tastingroom.com           require_signed  email.tastingroom.com;
+email.teamsnap.com              require_signed  email.teamsnap.com;
 email.techmedianetwork.com      require_signed  email.techmedianetwork.com;
 email.teva.com                  require_signed  email.teva.com;
 email.tgw.com                   require_signed  email.tgw.com;
@@ -912,7 +999,7 @@
 email.wsfsbank.com              require_signed  email.wsfsbank.com;
 email.wyndhamvo.com             require_signed  email.wyndhamvo.com;
 email.ydmailer.com              require_signed  email.yodle.com;
-email.zappos.com                require_signed  email.zappos.com;
+email.zappos.com                signed_white    email.zappos.com;               // key no longer in dns
 email.zazzle.com                require_signed  zazzle.com;
 email.zionlodge.com             require_signed  email.zionlodge.com;
 em.apartmentlist.com            require_signed  apartmentlist.com;
@@ -921,7 +1008,7 @@
 e.mars.com                      require_signed  mail.fagms.de;
 em.assurantsolutions.com        require_signed  em.assurantsolutions.com;
 e.match.com                     require_signed  e.match.com;
-embarqcreative.com              require_signed  embarqcreative.com;
+embarqcreative.com              signed_white    embarqcreative.com;             // some unsigned mail via their own mail server
 em.bbt.com                      require_signed  em.bbt.com;
 em.bloomstoday.com              require_signed  em.bloomstoday.com;
 embryriddleundergraduate.org    require_signed  embryriddleundergraduate.org;
@@ -943,7 +1030,9 @@
 emjreviews.com                  require_signed  zcsend.net;
 em.keurig.com                   require_signed  em.keurig.com;
 eml.condenast.com               require_signed  eml.condenast.com;
+eml.nordstrom.com               require_signed  eml.nordstrom.com;
 em.mandalaybay.com              require_signed  em.mandalaybay.com;
+emmanuelins.com                 require_signed  emmanuelins.onmicrosoft.com;
 em.mgcatalog.net                require_signed  em.mgcatalog.net;
 em.mgmnationalharbor.com        require_signed  em.mgmnationalharbor.com;
 em.mgmresorts.com               require_signed  em.mgmresorts.com;
@@ -964,11 +1053,13 @@
 em.sfbcoffee.com                require_signed  sfbcoffee.com;
 em.shop-companyofdogs.com       require_signed  em.shop-companyofdogs.com;
 em.shop-potpourri.com           require_signed  em.shop-potpourri.com;
+em.shutterfly.com               require_signed  em.shutterfly.com;
 ems.travelers.com               require_signed  ems.travelers.com;
 em.target.com                   require_signed  em.target.com;
 e.murad.com                     require_signed  e.murad.com;
 em.vdara.com                    require_signed  em.vdara.com;
 em.venetian.com                 require_signed  em.venetian.com;
+em.vonage.com                   require_signed  em.vonage.com;
 em.westmarine.com               require_signed  em.westmarine.com;
 em.wwcatalog.net                require_signed  em.wwcatalog.net;
 e.mypublisher.com               require_signed  e.mypublisher.com;
@@ -983,7 +1074,7 @@
 engagebycell.com                require_signed  engagebycell.com;
 e.njadvancemedia.com            require_signed  e.njadvancemedia.com;
 e.nm.com                        require_signed  e.nm.com;
-en.nydailynews.com              require_signed  en.nydailynews.com;
+en.nydailynews.com              signed_white    en.nydailynews.com;             // was signed, but they broke their _domainkey dns record
 e.nordstromrack.com             require_signed  e.nordstromrack.com;
 e.normthompson.com              require_signed  e.normthompson.com;
 entercom.com                    signed_white    entercom.com;                   // unsigned mail from their own mail servers, not listed in their spf record
@@ -1000,8 +1091,10 @@
 e.proflowers.com                require_signed  e.proflowers.com;
 e.progressive.com               require_signed  e.progressive.com;
 e.proplants.com                 require_signed  e.proplants.com;
+epysa.org                       require_signed  "epysa.org,epysa.onmicrosoft.com";
 equalexchange.coop              require_signed  equalexchange.coop;
 e.quill.com                     require_signed  e.quill.com;
+equuscs.com                     require_signed  rimagede.onmicrosoft.com;
 e.ralphlauren.com               require_signed  e.ralphlauren.com;
 e.readyrefresh.com              require_signed  e.readyrefresh.com;
 e.redbubble.com                 require_signed  e.redbubble.com;
@@ -1017,7 +1110,7 @@
 e.siriusxm.com                  require_signed  e.siriusxm.com;
 e-skillpath.com                 require_signed  e-skillpath.com;
 e.smilereminder.com             require_signed  smilereminder.com;
-e.snowbasin.com                 require_signed  e.snowbasin.com;                // needs spf, 200608._domainkey.e.snowbasin.com record not found
+e.snowbasin.com                 signed_white    e.snowbasin.com;                // 200608._domainkey.e.snowbasin.com record not found, used to pass spf but that txt record is now gone also
 esri.com                        signed_white    esri.com;                       // some unsigned mail via pphosted
 essentialhardware.com           signed_white    essentialhardware.com;          // some unsigned mail via klaviyomail.com
 e.staplespromotionalproducts.com require_signed  e.staplespromotionalproducts.com;
@@ -1029,10 +1122,12 @@
 e.target.com                    require_signed  e.target.com;
 e.tdbank.com                    require_signed  e.tdbank.com;
 e.teavana.com                   require_signed  e.teavana.com;
-e.therealdeal.com               require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+e.therealdeal.com               require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+et-notifications.asurion.com    require_signed  asurion.com;                    // key not in dns, but should pass strong spf
 et.npr.org                      require_signed  et.npr.org;
 et.nprstations.org              require_signed  et.nprstations.org;
-e.toyota.com                    require_signed  e.toyota.com;
+e.togshop.com                   require_signed  e.togshop.com;
+e.toyota.com                    require_signed  "e.toyota.com,amazonses.com";
 etrailer.com                    require_signed  icontactmail1.com;
 etrainingschool.com             require_signed  criticalimpactinc.com;
 e.travelocity.com               require_signed  "mg.travelocity.com,mg.expediamail.com";
@@ -1048,9 +1143,10 @@
 eu.sony.com                     require_signed  sony.onmicrosoft.com;
 e-vanguardcharitable.org        require_signed  e-vanguardcharitable.org;
 eventbriteacademy.com           require_signed  eventbriteacademy.com;
-eventbrite.com                  require_signed  "eventbrite.com,eventbrite-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+eventbrite.com                  require_signed  "eventbrite.com,eventbrite-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 events.aegpresents.com          require_signed  events.aegpresents.com;
 events.bisnow.com               require_signed  events.bisnow.com;
+events.comcast-spectacor.com    require_signed  events.comcast-spectacor.com;
 everbridge.net                  require_signed  everbridge.net;
 everkerr.com                    require_signed  everkerr.com;
 everlane.com                    require_signed  everlane.com;
@@ -1062,6 +1158,7 @@
 e.westernjournalism.com         require_signed  e.westernjournalism.com;
 e.winecountrygiftbaskets.com    require_signed  e.winecountrygiftbaskets.com;
 e.wintersilks.com               require_signed  e.wintersilks.com;
+e.wisteria.com                  require_signed  "e.wisteria.com,wisteria.com";
 ewomennetwork.com               signed_white    ewomennetwork.com;
 e.woolovers.com                 require_signed  e.woolovers.com;
 exacttarget.change.org          require_signed  exacttarget.change.org;
@@ -1076,10 +1173,13 @@
 explore.thenorthface.com        require_signed  explore.thenorthface.com;
 expolinc.us                     signed_white    expolinc.ccsend.com;            // some unsigned mail from their outbound servers, no spf record
 exponation.net                  require_signed  "exponation-net.20150623.gappssmtp.com,auth.ccsend.com,icontactmail1.com";
+exponential.com                 require_signed  exponentialinc.onmicrosoft.com;
 extracare.cvs.com               require_signed  extracare.cvs.com;
+extremereach.com                require_signed  extremereach.com;
+extremerestraints.com           require_signed  icontactmail9.com;
 exworkscapital.com              signed_white    198.memberemail.com;            // some unsigned mail via exacttarget, might be spam
 eyecareprovider.com             require_signed  eyecareprovider.com;
-eystudios.com                   require_signed  eystudios.ccsend.com;
+eystudios.com                   require_signed  "eystudios-com.20150623.gappssmtp.com,eystudios.ccsend.com";
 e.zulily.com                    require_signed  e.zulily.com;
 ezup.com                        signed_white    "ezup.com,ezup.onmicrosoft.com";    // some other unsigned mail via quotevalet.com
 facebookmail.com                require_signed  facebookmail.com;
@@ -1093,23 +1193,27 @@
 fanshop.mlblists.com            require_signed  fanshop.mlblists.com;
 fans.legacyrecordings.com       require_signed  fans.legacyrecordings.com;
 fantasysports.communications.yahoo.com require_signed  fantasysports.communications.yahoo.com;
-fantomdrives.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+fantomdrives.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 farmsanctuary.org               require_signed  mta-bbcspool.convio.net;
 fashionbizinc.org               require_signed  fashionbizinc.ccsend.com;
 fastspring.com                  require_signed  fastspring.com;
+fatherly.com                    require_signed  fatherly-com.20150623.gappssmtp.com;
 fedbarlive.org                  signed_white    "emsend.com,em.secureserver.net";   // emsend signing with domainkeys, not dkim
+federalreserve.com              unsigned_black  federalreserve.com;
 fedex.com                       require_signed  fedex.com;
 fedgovconnect.org               require_signed  fedgovconnect-org.20150623.gappssmtp.com;
 feedvisor.com                   require_signed  "feedvisor-com.20150623.gappssmtp.com,feedvisor.com";
 feliciansisters.org             require_signed  feliciansisters.onmicrosoft.com;
 fidf.org                        require_signed  "bounce.bluestatedigital.com,auth.ccsend.com";
 fiercehealthpayer.com           require_signed  fiercehealthpayer.com;
+fiercepharma.com                require_signed  fiercepharma.com;
 fightforreform.org              signed_white    bounce.bluestatedigital.com;    // some unsigned mail from bluestate
 fileandservedelaware.com        require_signed  fileandserve.com;
-filmadelphia.org                signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+filmadelphia.org                signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 firebirdpresort.com             require_signed  firebirdpresort.onmicrosoft.com;
 firecracker10k.org              require_signed  icontactmail4.com;
 fire-design.fr                  require_signed  newsletter.fire-design.fr;
+fireflyon.com                   require_signed  fireflyon-com.20150623.gappssmtp.com;
 firefox.com                     require_signed  firefox.com;
 firstam.com                     require_signed  firstam.com;
 firstleaf.club                  require_signed  "firstleaf.club,pmta.sailthru.com";
@@ -1121,54 +1225,59 @@
 fladems.com                     signed_white    "fladems.com,bounce.bluestatedigital.com";
 fladems.org                     signed_white    bounce.bluestatedigital.com;
 flagandbanner.com               require_signed  omktmail2.com;
-flagsource.com                  require_signed  flagsource.ccsend.com;
-flaticon.com                    require_signed  "mandrillapp.com,flaticon.com";
+flagsource.com                  require_signed  "flagsource.ccsend.com,*.onmicrosoft.com;
+flaticon.com                    require_signed  "mandrillapp.com,mailchimpapp.net,flaticon.com";
 flaviar.com                     require_signed  flaviar.com;
 flexjobs.com                    require_signed  flexjobs.com;
 flickr.com                      require_signed  flickr.com;
 fluidreview.com                 require_signed  chide.it;
+fly2.spirit-airlines.com        require_signed  fly2.spirit-airlines.com;
 fly.com                         require_signed  fly.com;
 fly.spirit-airlines.com         require_signed  fly.spirit-airlines.com;
 fmidm.com                       signed_white    "fmidm.com,fmidirectmail.onmicrosoft.com";  // some unsigned mail via their own servers
 followmyhealth.com              require_signed  email.followmyhealth.com;
-fontexplorerx.com               signed_white    email.monotype.com;             // some unsigned mail from salesforce
+fontexplorerx.com               signed_white    email.monotype.com;             // some unsigned mail via salesforce
 foolsubs.com                    require_signed  foolsubs.com;
 footballcamps.com               require_signed  footballcamps.com;
 footsolutions.com               require_signed  footsolutions.com;
+forbes.com.br                   require_signed  forbes-com-br.20150623.gappssmtp.com;
 foreseeresults.com              require_signed  4cresults.com;
 foreupsoftware.com              require_signed  foreupsoftware.com;
-formdecor.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+formdecor.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 fortispay.com                   require_signed  fortispay.com;
 fourhourbody.com                require_signed  fourhourbody.com;
+fox.com                         require_signed  "foxgroupinc.onmicrosoft.com,cmail19.com,cmail20.com";
 foxcreative.net                 signed_white    emlr2.com;                      // some unsigned mail via ms outlook
 foxtv.com                       require_signed  foxtv.onmicrosoft.com;
-frame.io                        require_signed  frame.io;
+frame.io                        require_signed  "frame.io,amazonses.com";
 fraudprevention.chase.com       require_signed  fraudprevention.chase.com;
-freeconference.com              require_signed  freeconference.com;
+freeconference.com              signed_white    freeconference.com;             // allow their messages to be forwarded
 freedomforallamericans.org      require_signed  bounce.bluestatedigital.com;
 freepik-mail.com                require_signed  freepik-mail.com;
 from.ieee.org                   require_signed  from.ieee.org;
 fsshelpdesk.org                 require_signed  news.fedhelpdesk.org;
 fult.com                        require_signed  fultonbank.onmicrosoft.com;
 fusioncharts.com                require_signed  fusioncharts.com;
-futurity.org                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+futurity.org                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 gahmusa.org                     require_signed  gahmusa.org;                    // cgale unsubscribed 2017-06-28
-gahsp.org                       require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+gahsp.org                       require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+gallegosunited.com              require_signed  gallegosunited-com.20150623.gappssmtp.com;
 gamechanger.io                  require_signed  gamechanger.io;
 gap.com                         require_signed  gap.com;
 gate1mail.com                   require_signed  gate1mail.com;
 gc.email.amazon.com             require_signed  amazon.com;                     // gift cards
 gcihealth.com                   require_signed  yrb.onmicrosoft.com;
-generation-brands.com           require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+generation-brands.com           require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 genghisgrill.com                require_signed  "pxsmail.com,khansklub.pxsmail.com";
 geocaching.com                  require_signed  geocaching.com;
 gershmany.org                   signed_white    mail196.atl61.mcsv.net;
 gerstmangroup.com               require_signed  "auth.ccsend.com,questservicegroup.ccsend.com";
 ges.com                         signed_white    "ges.com,viadcorp.onmicrosoft.com";
+getfpv.com                      require_signed  getfpv.com;
 getjibjab.com                   require_signed  getjibjab.com;
 getty.edu                       require_signed  gettytrust.onmicrosoft.com;
 gge4mailer.com                  signed_white    email.gge4mailer.com;
-ggimageusa.com                  require_signed  "ggimageusa-com.20150623.gappssmtp.com,smtpserver.email,smtpsendmail.com";
+ggimageusa.com                  require_signed  "icontact.com,icontactmail3.com,smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com,ggimageusa-com.20150623.gappssmtp.com";
 gifts.figis.com                 require_signed  gifts.figis.com;
 gillians.com                    require_signed  gillians.ccsend.com;
 girlscoutsla.org                require_signed  girlscoutsla.org;
@@ -1176,6 +1285,7 @@
 glassesusa.com                  require_signed  bronto.com;
 globalfinancegroup.com          require_signed  globalfinancegroup-com.20150623.gappssmtp.com;
 globalmasstransit.net           require_signed  cvent-planner.com;
+globaltranz.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 go.coachup.com                  require_signed  go.coachup.com;
 godaddy.com                     require_signed  godaddy.com;
 gofundme.com                    require_signed  "gofundme.com,email.gofundme.com";
@@ -1183,6 +1293,8 @@
 go-jsb.com                      require_signed  kpn1210384.onmicrosoft.com;
 gokdm.com                       require_signed  gokdm.ccsend.com;
 gokhalemethod.com               require_signed  gokhalemethod.com;
+goldenstate.is                  require_signed  "goldenstate.is,goldenstate-is.20150623.gappssmtp.com";
+golfweek.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 google.com                      require_signed  google.com;
 googlemail.com                  require_signed  googlemail.com;
 goop.com                        require_signed  goop.com;
@@ -1191,14 +1303,13 @@
 gordoncompaniesinc.com          require_signed  gordoncompaniesinc.com;
 goto.arcadiapublishing.com      require_signed  goto.arcadiapublishing.com;
 gotowebinar.com                 require_signed  gotowebinar.com;
-govbrief.us                     require_signed  govbrief.us;
 gov-con.com                     require_signed  icontactmail2.com;
 govsubscriptions.michigan.gov   require_signed  govsubscriptions.michigan.gov;
 gpcc.com                        require_signed  gpcc.com;
 grabcad.com                     require_signed  grabcad.com;
 grandopera.org                  signed_white    grandopera.ccsend.com;          // some unsigned mail via sendlabs.com
 graphiccommunications.us        require_signed  graphiccommunications.onmicrosoft.com;
-graphisoft.com                  require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+graphisoft.com                  require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 greatebay.com                   require_signed  sendclubmail.com;
 greaterthanone.com              require_signed  greaterthanone.onmicrosoft.com;
 greatist.com                    require_signed  greatist.com;
@@ -1207,21 +1318,23 @@
 greenbuildingunited.org         require_signed  dvgbc365.onmicrosoft.com;
 greenforall.org                 require_signed  greenforall.org;
 greenpasture.org                require_signed  greenpasture.org;
-greenphillyblog.com             require_signed  "gmail.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+greenphillyblog.com             require_signed  "gmail.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 greensecurityllc.com            require_signed  netorgft1001345.onmicrosoft.com;
 greenvelope.com                 require_signed  greenvelope.com;
 greyhawk.com                    require_signed  "greyhawkna.onmicrosoft.com,*.ccsend.com";
 greystar.com                    require_signed  "greystar365.onmicrosoft.com,entrata.com";
-gridphilly.com                  require_signed  "gridphilly-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+gridphilly.com                  require_signed  "gridphilly-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+grindr.com                      require_signed  "google.com,grindr-com.20150623.gappssmtp.com";
 grizzly.com                     require_signed  grizzly.com;
 groove3.com                     require_signed  groove3.com;
+groupon.com                     require_signed  groupon.com;
 grove.co                        require_signed  grove.co;
 grundoon.net                    require_signed  grundoon.onmicrosoft.com;
 gsa-cms.com                     require_signed  gsa-cms.com;
 gsb.columbia.edu                require_signed  "columbiabusiness.onmicrosoft.com,icontactmail2.com";
 gtcsocial.com                   require_signed  gtcsocial.com;
-guidestar.org                   require_signed  guidestar.org;
-gundogsupply.com                require_signed  "gundogsupply.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+guidestar.org                   require_signed  "guidestar.org,guidestarusa.onmicrosoft.com,amazonses.com";
+gundogsupply.com                require_signed  "gundogsupply.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 gusto.com                       require_signed  gusto.com;
 h1.hilton.com                   require_signed  h1.hilton.com;
 h1.hiltonhhonors.com            require_signed  h1.hiltonhhonors.com;
@@ -1230,6 +1343,8 @@
 halfoffdeal.com                 require_signed  halfoffdeal.com;
 hallmarkmoviesnow.com           require_signed  "hallmarkmoviesnow.com,pmta.sailthru.com";
 halpernlevy.com                 require_signed  halpernandlevy.onmicrosoft.com;
+hanapinmarketing.com            require_signed  hanapinmarketing.com;
+happify.com                     require_signed  happify.com;
 harborfreight.com               require_signed  harborfreight-com.20150623.gappssmtp.com;
 harborfreightemail.com          require_signed  harborfreightemail.com;
 hardrockhotelsd.com             require_signed  zmaildirect.com;
@@ -1239,11 +1354,12 @@
 hartfordadmission.org           require_signed  hartfordadmission.org;
 harting.com                     require_signed  "mktroute.com,mktomail.com";
 harvestapp.com                  require_signed  harvestapp.com;
-harvestseasonalgrill.com        require_signed  "getvenga.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+harvestseasonalgrill.com        require_signed  "getvenga.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 hauptwerk.com                   require_signed  hauptwerk.com;
 havenadoptions.com              require_signed  havenadoptions-com.20150623.gappssmtp.com;
 hawkemedia.com                  require_signed  hawkemedia.com;
-hbham.com                       require_signed  hbham.com;
+hbanet.org                      require_signed  hbanet.org;
+hbham.com                       signed_white    hbham.com;                      // unsigned mail from their own mail server that fails strong spf
 hcconstructors.com              require_signed  pwcusa.ccsend.com;
 healthcarefinancenews.com       require_signed  healthcarefinancenews.com;
 healthcare.gov                  require_signed  healthcare.gov;
@@ -1264,13 +1380,14 @@
 hhglobal.com                    require_signed  hhglobal.com;
 hhgreggemail.com                require_signed  hhgreggemail.com;
 hhsportsandevents.com           require_signed  hersheyha.onmicrosoft.com;
-hicastsports.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-highimpact.com                  require_signed  "highimpact.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+hicastsports.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+highimpact.com                  require_signed  "highimpact.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 hightailmail.com                require_signed  "hightailmail.com,*.hubspotemail.net,*.hubspot.com";
 himssmedia.com                  require_signed  himssmedia.com;
 hired.com                       require_signed  hired.com;
 hive.com                        require_signed  "hive.com,hive-com.20150623.gappssmtp.com";
 hmc.edu                         require_signed  hmc2.onmicrosoft.com;
+hofstra.edu                     require_signed  "hofstra.edu,targetx.com,hofstra1edu.onmicrosoft.com";
 holosonics.com                  require_signed  holosonics.ccsend.com;
 holts.com                       signed_white    icontactmail1.com;              // some unsigned mail from their own web server with no reverse dns not listed in their spf record
 homeaway.com                    require_signed  homeaway.com;
@@ -1282,11 +1399,12 @@
 hootsuite.com                   require_signed  hootsuite.com;
 hospitalitydental.com           require_signed  hospitalitydental.ccsend.com;
 hotels.com                      require_signed  hotels.com;
+housecallpro.com                require_signed  housecallpro.com;
 houseofgeoscience.org           require_signed  "sendgrid.info,mailplus.nl";
 houzz.com                       signed_white    houzz.com;                      // some unsigned mail via salesforce
 hq.acm.org                      require_signed  acmhq.onmicrosoft.com;
 hsbc.com                        require_signed  hsbc.com;
-htallc.com                      require_signed  "smtpsendmail.com,smtp.com";
+htallc.com                      require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 hubs.com                        require_signed  hubs.com;
 hulumail.com                    require_signed  hulumail.com;
 hungryroot.com                  require_signed  "hungryroot.com,email.hungryroot.com";
@@ -1297,10 +1415,13 @@
 hyundaimotors.com               require_signed  hyundaimotors.com;
 iamericaaction.org              signed_white    bounce.bluestatedigital.com;    // some unsigned via bluestatedigital as well
 ibotta.com                      require_signed  ibotta.com;
+id.apple.com                    require_signed  id.apple.com;
 idealprec.com                   require_signed  idealprec.ccsend.com;
 identity-morningstar.com        require_signed  identity-morningstar.com;
 identityprotection.norton.com   require_signed  identityprotection.norton.com;
-idsa.org                        require_signed  idsa.ccsend.com;
+idsa.org                        require_signed  "*.ccsend.com";
+idscreates.com                  require_signed  idscreates-com.20150623.gappssmtp.com;
+ids.ups.com                     require_signed  ids.ups.com;                    // unsigned mail should pass spf -all
 ieee.org                        require_signed  "ieee-org.20150623.gappssmtp.com,cmail19.com,cmail20.com,amazonses.com";  // some unsigned survey mail via confirmit.com that fails spf
 ientry.info                     require_signed  ientry.net;
 ifixit.com                      require_signed  ifixit.com;
@@ -1316,8 +1437,9 @@
 improvementscatalog-email.com   require_signed  improvementscatalog-email.com;
 imt-mach.com                    require_signed  imt-mach.com;
 inbound.com                     require_signed  inbound.com;
-inbound.efax.com                require_signed  inbound.efax.com;               // never signed, but must pass spf
+inbound.efax.com                require_signed  inbound.efax.com;               // unsigned mail should pass spf -all
 inbox.bissell.com               require_signed  inbox.bissell.com;
+independent.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 industrymarketingsolutions.com  require_signed  mail-202-169.rm0005.net;
 infinitytools.com               require_signed  "infinitytools.ccsend.com,remarkety.com";
 info1.networksolutions.com      require_signed  info1.networksolutions.com;
@@ -1327,14 +1449,18 @@
 info6.accountonline.com         require_signed  info6.accountonline.com;
 info6.citi.com                  require_signed  info6.citi.com;
 info.bitdefender.com            require_signed  info.bitdefender.com;
+info.cdw.com                    require_signed  info.cdw.com;
 info.citibank.com               require_signed  "citibank.com,info.citibank.com";
 info.citrixdelivers.com         require_signed  info.citrixdelivers.com;
 info.comenity.net               require_signed  info.comenity.net;
 info.cynopsis.com               require_signed  "info.cynopsis.com,mktdns.com";
+info.ebay.com                   require_signed  info.ebay.com;
 info.key.com                    require_signed  info.key.com;
 info.mountaincreek.com          require_signed  info.mountaincreek.com;
+info.ms.aa.com                  require_signed  info.ms.aa.com;
 info.prioritypass.com           require_signed  info.prioritypass.com;
 information.nature.com          require_signed  information.nature.com;
+info.sciex.com                  require_signed  info.sciex.com;
 info.stagnitomedia.com          require_signed  stagnito.cfmvmail.com;
 ingrammicro.com                 signed_white    "leadflight.net,pb-dynmktg.com";    // unsigned mail via pphosted, no spf record
 inhousejobalert.com             require_signed  inhousejobalert.com;
@@ -1346,32 +1472,35 @@
 inpower.ca                      require_signed  inpower-ca.20150623.gappssmtp.com;
 insideapple.apple.com           require_signed  insideapple.apple.com;
 insideradio.com                 require_signed  e2ma.net;
+inspirato.com                   require_signed  inspirato.com;
 inspire.pinterest.com           require_signed  inspire.pinterest.com;
 inspireschools.org              require_signed  inspireschools-org.20150623.gappssmtp.com;
 instamed.com                    require_signed  instamed.com;
 instoreaudionetwork.com         require_signed  instoreaudio.onmicrosoft.com;
 insurance.thehartford.com       require_signed  insurance.thehartford.com;
 intacct.com                     require_signed  intacct.com;
+interactive.wsj.com             require_signed  "interactive.wsj.com,wsj.com";
 interactone.com                 require_signed  "mx-senderer-02.com,mx-senderer-03.com";
 interior-specialties.com        signed_white    "appriver3651009419.onmicrosoft.com,smtpcorp.com";
+internetbrands.com              require_signed  internetbrands.com;
 intervalintl.com                require_signed  iilg.onmicrosoft.com;
 inthenewsonline.com             require_signed  "*.shared.hubspot.com";
 intuit.com                      require_signed  intuit.com;
-intuitsolutions.net             require_signed  "affinitylive.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+intuitsolutions.net             require_signed  "affinitylive.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 invidtech.com                   require_signed  "auth.ccsend.com,zcsend.net";
 invista.com                     signed_white    "invista.com,kochind.onmicrosoft.com";  // some broken signatures from microsoft via pphosted
 invntree.com                    require_signed  invntree.com;
 ipipeline.com                   require_signed  ipipeline.onmicrosoft.com;
 ipushtech.com                   require_signed  pushtech.onmicrosoft.com;
 iriworldwide.com                require_signed  iriworldwide.com;
-iskysoft.com                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+iskysoft.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 ismgcorp.com                    require_signed  ismgcorp.com;
 ispringmail.com                 require_signed  ispringmail.com;
 issuumail.com                   require_signed  issuumail.com;
 ithirings.com                   require_signed  messaging-master.net;
 iupdate.dnb.com                 require_signed  dnb.com;
 ixactcontact.com                require_signed  ixactcontact.com;
-jackseeds.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+jackseeds.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 jackthreads.com                 require_signed  jackthreads.com;
 jacpac.org                      require_signed  jacpac.ccsend.com;
 jakprints.com                   require_signed  "jakprints.com,jakprints-com.20150623";
@@ -1381,8 +1510,9 @@
 jcresorts.com                   require_signed  jcresorts.com;
 jdrf.org                        signed_white    jdrf.org;                       // some unsigned mail via convio not included in their spf record
 jenjudge.com                    require_signed  emlr2.com;
+jerrysartarama.com              require_signed  jerrysartarama.com;
 jet.com                         signed_white    jet.com;                        // some unsigned mail from mailchimp that fails spf
-jewelscent.com                  require_signed  delivery.klaviyomail.com;
+jewelscent.com                  require_signed  "*.klaviyomail.com";
 jewishphilly.org                require_signed  "aweber.com,auth.ccsend.com,jewishphilly.ccsend.com,jewishphilly-org.20150623.gappssmtp.com";
 jhu.edu                         signed_white    "e2ma.net,publicaster.com,bsftransmit7.com,armssoftware.com";     // possibly other signers
 jibjab.com                      require_signed  "jibjab.com,recurly.com";
@@ -1395,12 +1525,14 @@
 jobs.cl.alerted.org             require_signed  cl.alerted.org;
 jobs.fbg.alerted.org            require_signed  fbg.alerted.org;
 jobs.mpr.alerted.org            require_signed  mpr.alerted.org;
-johnandkiras.com                require_signed  johnandkiras.com;
+johnandkiras.com                require_signed  "johnandkiras.com,commercev3.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 johncanningco.com               require_signed  spsend.com;
 johnmaxwell.com                 require_signed  email.johnmaxwell.com;
+johnstonortholab.com            require_signed  johnstonortholab.com;
 joshshapiro.org                 signed_white    bounce.bluestatedigital.com;
 jstor.org                       require_signed  jstor.org;
 judsonsart.com                  require_signed  icontactmail3.com;
+jusmisiones.gov.ar              unsigned_black  jusmisiones.gov.ar;
 justice.org                     require_signed  justice.org;
 kaarmadealer.com                require_signed  kaarmadealer.com;
 kaiserhealthnews.org            require_signed  kff.org;
@@ -1408,45 +1540,54 @@
 kamalaharris.org                signed_white    kamalaharris.org;
 kantar.com                      require_signed  "ktglbuc.onmicrosoft.com,icontactmail6.com";
 kantarmedia.com                 require_signed  "kantarmedia.com,ktglbuc.onmicrosoft.com,icontactmail3.com,icontactmail6.com";
-katzmedia.com                   require_signed  "iheartmedia.onmicrosoft.com,clearchannel.com,iheartmedia.com";
+katzmedia.com                   require_signed  "katzmedia.com,iheartmedia.onmicrosoft.com,clearchannel.com,iheartmedia.com";
 kaydaly.com                     require_signed  "kaydaly.com,bluehornet.com";
 kbkg.net                        require_signed  kbkg.net;
 kcrw.org                        signed_white    "kcrw-org.20150623.gappssmtp.com,*.hubspot.com";    // unsigned from traffic@
 kennedy-center.org              require_signed  kennedy-center.org;
-kep.com                         require_signed  kep.ccsend.com;
+kep.com                         require_signed  "kep.com,*.ccsend.com";
 kerio.com                       require_signed  kerio.com;
 keswicktheatre.com              signed_white    keswicktheatre.ccsend.com;      // some unsigned mail from their own servers
 keystoneline.com                require_signed  keystoneline.ccsend.com;
 kftv.com                        require_signed  kftv.com;
 kik.com                         require_signed  action.kik.com;
-kingarthurflour.com             require_signed  kingarthurflour.com;
+kilo943.com                     require_signed  kilo943-com.20150623.gappssmtp.com;
+kingarthurflour.com             signed_white    kingarthurflour.com;            // some unsigned mail via salesforce
 kingscollegeinfo.org            require_signed  kingscollegeinfo.org;
+kinsmangarden.com               require_signed  "commercev3.com,icontactmail2.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 kmnewsletters.com               require_signed  kmnewsletters.com;
 knoll.com                       require_signed  knoll.com;
-knotandrope.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+knotandrope.com                 require_signed  "sendgrid.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 knowledge.onlinecompliancepanel.net require_signed  knowledge.onlinecompliancepanel.net;
 kofc.org                        signed_white    www-kofc.ccsend.com;            // some unsigned mail from their own mail server not listed in their spf record
 komenphiladelphia.org           require_signed  komenphiladelphia.org;
+kovr.com                        signed_white    cbs.onmicrosoft.com;            // unsigned mail via pphosted
+kpbs.org                        require_signed  "kpbs.org,spsend.com";
 kqllc01.com                     require_signed  kqllc01.com;
-kremp.com                       signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";    // some other unsigned mail, no spf record
+krem.com                        require_signed  tegna.onmicrosoft.com;
+kremp.com                       signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";    // some other unsigned mail, no spf record
+ksgcc.com                       require_signed  "ksgcc.com,ksgcc.onmicrosoft.com";
 kw.com                          require_signed  kw.com;
 labcorp.com                     require_signed  labcorp.com;
 laboratorytesting.com           require_signed  laboratorytesting.com;
+lacitylimo.com                  require_signed  "sendgrid.info,email-od.com,Citytransinc.onmicrosoft.com";
 lacity.org                      require_signed  lacity-org.20150623.gappssmtp.com;
 ladygrace.com                   require_signed  ladygrace.com;
 lakearrowheadchamber.com        signed_white    lakearrowhead.ccsend.com;       // some unsigned mail via unifiedlayer.com
 landarq.com                     require_signed  "landarq.com,landarq-com.20150623.gappssmtp.com";
 lanierlawfirm.com               require_signed  "cmail19.com,cmail20.com";
 laopera.org                     require_signed  "laopera.org,laopera.onmicrosoft.com";
-largeformatreview.com           require_signed  "amazonses.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+largeformatreview.com           require_signed  "amazonses.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 larryjohnsonspeaker.com         require_signed  priorityoneemail.com;
 latest.newsmax.com              require_signed  latest.newsmax.com;
+latimes.com                     require_signed  "latimes.com,nl.latimes.com";
 latinworks.com                  require_signed  latinworks.onmicrosoft.com;
 law360.com                      require_signed  "law360.com,mailings-alt.law360.com";
 laweekly-insider.com            require_signed  laweekly-insider.com;
-lawline.com                     require_signed  icontactmail1.com;
+lawline.com                     require_signed  "*.lawline.com,icontactmail1.com,*.hubspotemail.net";
 lawreviewcle.com                require_signed  lawreviewcle.com;
 law.stanford.edu                require_signed  "cmail19.com,cmail20.com";
+lawyers.com                     require_signed  lawyers.com;
 lawyertechinfo.com              require_signed  "icontactmail2.com,icontactmail6.com";
 lazorlaw.com                    require_signed  johnlazor.onmicrosoft.com;
 lbccc.org                       require_signed  "lbccc.ccsend.com,www-lbccc.ccsend.com";
@@ -1454,6 +1595,7 @@
 leapinglizardssmyrna.com        require_signed  em.secureserver.net;
 ledbury.com                     require_signed  ledbury.com;
 ledgerwallet.com                require_signed  smtp.groovehq.com;
+lee.org                         require_signed  lee.org;                        // dmarc
 leerburg.com                    require_signed  amazonses.com;
 leeshoagiehouse.com             require_signed  leeshoagiehouse.ccsend.com;
 lefbc.com                       require_signed  lefbc.com;
@@ -1461,6 +1603,7 @@
 legrand.us                      require_signed  grpleg.onmicrosoft.com;
 lehighvalleychamber.org         require_signed  lehighvalleychamber.ccsend.com;
 levinperconti.com               require_signed  levinperconti.onmicrosoft.com;
+lexingtonmfg.com                require_signed  lexingtonmfg.com;
 lexisnexis.com                  require_signed  lexisnexis.com;
 lexmachina.com                  require_signed  lexmachina.com;
 lexusenform.com                 require_signed  lexusenform.com;
@@ -1471,25 +1614,30 @@
 lifeandstylemag.com             require_signed  lifeandstylemag.com;
 lifelock.com                    require_signed  lifelock.com;
 lightyearmg.com                 require_signed  lightyearmg-com.20150623.gappssmtp.com;
+liketoknow.it                   require_signed  liketoknow.it;
 lillarogers.com                 require_signed  lillarogers.ccsend.com;
 lindenmeyr.com                  require_signed  lindenmeyrmunroe.ccsend.com;
 linkedin.com                    require_signed  linkedin.com;
 linquest.com                    require_signed  linquest.onmicrosoft.com;
+linuxjournal.com                require_signed  "linuxjournal.com,cmail19.com,cmail20.com";
 linuxjournalservices.com        require_signed  linuxjournalservices.com;
-liquidityservices.com           require_signed  mandrillapp.com;
+liquidityservices.com           require_signed  "mandrillapp.com,mailchimpapp.net";
 liquor.com                      require_signed  liquor.com;
 listedby.com                    require_signed  listedby.com;
 listeneremail.net               require_signed  listeneremail.net;
 list.moveon.org                 require_signed  "list.moveon.org,moveon.org";
+lists.samba.org                 require_signed  lists.samba.org;
 lists.trialsmith.com            require_signed  lists.trialsmith.com            // unsigned mail but it passes spf
-littsquality.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+littsquality.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 liveperson.com                  require_signed  liveperson.com;
 llbgroup.com                    require_signed  "llbgroup.com,llbgrouptechsolutions.onmicrosoft.com";
 llnl.gov                        require_signed  doellnl.onmicrosoft.com;
 loanservicing.bankofamerica.com require_signed  loanservicing.bankofamerica.com;
 localjobservice.com             require_signed  localjobservice.com;
 logees.com                      signed_white    "logees.com,logees.ccsend.com"; // some unsigned mail from their own servers that fails spf, broken sigs from their own server
+login.gov                       require_signed  login.gov;
 logistick.com                   require_signed  logistick.com;
+logmein.com                     require_signed  logmein.com;
 logomark.com                    require_signed  logomark.onmicrosoft.com;
 longbeachhonda.com              require_signed  "xtime.com,dealersocket.com";
 loseit.com                      require_signed  loseit.com;
@@ -1497,23 +1645,26 @@
 loweekly.com                    require_signed  loweekly.com;
 loyaltyalliance.com             require_signed  "loyaltyalliance.com,mx-senderer-02.com,mx-senderer-03.com";
 loyalty.bloomingdales.com       require_signed  loyalty.bloomingdales.com;
-loyalty.ms.aa.com               require_signed  loyalty.ms.aa.com;
-lpl.com                         require_signed  lpl.com;
+loyalty.ms.aa.com               signed_white    loyalty.ms.aa.com;              // they send some unsigned mail
+lpl.com                         require_signed  "lpl.com,email01.fmgsuite.com";
 lqa.com                         require_signed  cp20.com;
 l.soma.com                      require_signed  l.soma.com;
+lsu.edu                         require_signed  lsu.edu;                        // unsigned, but should pass strong spf
 ltsc.ucsb.edu                   require_signed  ltsc.ucsb.edu;
 lucidchart.com                  require_signed  lucidchart.com;
 luv.southwest.com               require_signed  luv.southwest.com;
 l.whitehouseblackmarket.com     require_signed  l.whitehouseblackmarket.com;
+lycra.com                       require_signed  lycra.onmicrosoft.com;
 lydiasuniforms.com              signed_white    lydiasuniforms.com;             // some unsigned mail from their own servers
 lyftmail.com                    require_signed  lyftmail.com;
 lynda.com                       require_signed  lynda.com;
 m1.eml.beau-coup.com            require_signed  m1.eml.beau-coup.com;
 maadvisor.com                   require_signed  cvent-planner.com;
 maakenterprises.com             require_signed  maakenterprises.com;
+macdonaldmedia.com              require_signed  macdonaldmedia.onmicrosoft.com;
 machinezone.com                 require_signed  machinezone.com;
 macsales.com                    signed_white    macsales.com;                   // some unsigned mail via salesforce
-magicjack.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+magicjack.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 magnaplate.com                  require_signed  magnaplate.com;
 maground.com                    require_signed  "*.acemsa4.com";
 mag.southernliving.com          require_signed  mag.southernliving.com;
@@ -1524,9 +1675,9 @@
 mail3.ams-cc.com                require_signed  ams-cc.com;
 mail5.avvo.com                  require_signed  mail5.avvo.com;
 mail7.creditkarma.com           require_signed  mail.creditkarma.com;
-mail.accounts.autodesk.com      require_signed  email.accounts.autodesk.com;
+mail.accounts.autodesk.com      require_signed  "email.accounts.autodesk.com,identity.autodesk.com";
 mail.authorize.net              require_signed  mail.authorize.net;
-mail.barnesandnoble.com         require_signed  mail.barnesandnoble.com;
+mail.barnesandnoble.com         require_signed  "mail.barnesandnoble.com,bounceexchange.com";
 mail.bloombergbusiness.com      require_signed  mail.bloombergbusiness.com;
 mail.bonefishgrill.com          require_signed  mail.bonefishgrill.com;
 mail.bouqs.com                  require_signed  mail.bouqs.com;
@@ -1536,8 +1687,9 @@
 mailchimp.com                   require_signed  mailchimp.com;
 mail.citipricerewind.com        require_signed  mail.citipricerewind.com;       // stupid banks with multiple branding;
 mail.crateandbarrel.com         require_signed  mail.crateandbarrel.com;
+mail.digiday.com                require_signed  mail.digiday.com;
 mail.disneydestinations.com     require_signed  mail.disneydestinations.com;
-mail.efax.com                   require_signed  mail.efax.com;                  // never signed, but must pass spf
+mail.efax.com                   require_signed  mail.efax.com;                  // unsigned mail should pass spf ~all
 mail.elsevier.com               require_signed  mail.elsevier.com;
 mailer.birchbox.com             require_signed  mailer.birchbox.com;
 mailer.box.com                  require_signed  box.com;
@@ -1554,12 +1706,15 @@
 mail.hbonow.com                 require_signed  mail.hbonow.com;
 mailhost.docuhost-net.com       require_signed  mailhost.docuhost-net.com;
 mail.hotels.com                 require_signed  mail.hotels.com;
+mail.idnotify.com               require_signed  mail.idnotify.com;
 mail.imparture.us               require_signed  mail.imparture.us;
 mail.instagram.com              require_signed  mail.instagram.com;
 mail.lexisnexis.com             require_signed  mail.lexisnexis.com;
+mail.loft.com                   require_signed  mail.loft.com;
 mail.lotsahelpinghands.com      require_signed  mail.lotsahelpinghands.com;
 mail.medscape.com               require_signed  mail.medscape.com;
 mail.mlblists.com               require_signed  mail.mlblists.com;
+mail.ms.aa.com                  require_signed  mail.ms.aa.com;
 mail.onedrive.com               require_signed  mail.onedrive.com;
 mail.patient-message.com        require_signed  mail.patient-message.com;
 mail.paypal.com                 require_signed  mail.paypal.com;
@@ -1588,8 +1743,10 @@
 mail.vresp.com                  require_signed  vresp.com;
 mail.westelm.com                require_signed  mail.westelm.com;
 mail.whitehouse.gov             require_signed  mail.whitehouse.gov;
+mail.yelp.com                   require_signed  yelp.com;
 mail.zillow.com                 require_signed  mail.zillow.com;
 mainewhitewater.com             require_signed  northcountryrivers.ccsend.com;
+mainfreightusa.com              require_signed  mainfreightusa.com;
 maintain.se                     require_signed  minutemailer.com;
 makinmusic.com                  require_signed  makinmusic.ccsend.com;
 malwarebytes.com                require_signed  malwarebytes.com;
@@ -1599,8 +1756,9 @@
 mariahmarketing.com             require_signed  mariahmarketing-com.20150623.gappssmtp.com;
 marinemax.com                   require_signed  marinemax.com;
 marinsoftware.com               require_signed  marinsoftware.com;
-markbric.com                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+markbric.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 markcustom.com                  require_signed  ipengines.net;                  // seems to be mediasupply client
+marketing.discountfilterstore.com require_signed  marketing.discountfilterstore.com;
 marketing.ipsy.com              require_signed  marketing.ipsy.com;
 marketing.qdoba.com             require_signed  marketing.qdoba.com;
 marketplace.amazon.ca           require_signed  amazon.ca;
@@ -1611,8 +1769,9 @@
 marymorrissey.com               require_signed  marymorrissey.com;
 mastrocomm.com                  require_signed  twisteddune.ccsend.com;
 matadornetwork.com              require_signed  matadornetwork.com;
+match-cap.com                   require_signed  match-cap-com.20150623.gappssmtp.com;
 matildajaneclothing-email.com   require_signed  matildajaneclothing-email.com;
-matterhackers.com               require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+matterhackers.com               require_signed  "e1.niche.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 maxpedition.com                 require_signed  icontactmail1.com;
 mayo.edu                        signed_white    mayoclinic.com;                 // some unsigned via blackbaud (mailing list?), no spf record
 mcfinc.com                      require_signed  "mortgage-email.com,mcfinc-com.20150623.gappssmtp.com";
@@ -1625,8 +1784,10 @@
 mediabrains.com                 require_signed  mediabrains.com;
 mediaexperts.com                require_signed  mediaexpert.onmicrosoft.com;
 media.ieee.org                  require_signed  media.ieee.org;
+mediapost.com                   require_signed  mediapost.com;
 medium.com                      require_signed  medium.com;
-medjet.com                      require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+medjet.com                      require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+mednet.ucla.edu                 require_signed  "uclahealth.ccsend.com,uclahs.onmicrosoft.com";
 medquestltd.com                 signed_white    medquest.ccsend.com;            // some unsigned mail from their own servers
 medstatix.com                   require_signed  medstatix.com;
 meetup.com                      require_signed  meetup.com;
@@ -1646,7 +1807,7 @@
 meraki.net                      require_signed  meraki.net;
 merchant.bankofamerica.com      require_signed  merchant.bankofamerica.com;
 meredith.com                    require_signed  meredith.com;
-merrickbank.com                 require_signed  smtpsendmail.com;
+merrickbank.com                 require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 message.bbt.com                 require_signed  message.bbt.com;
 message.fedex.com               require_signed  message.fedex.com;
 message.merrilledge.com         require_signed  message.merrilledge.com;
@@ -1656,22 +1817,28 @@
 messages.clippers.com           require_signed  clippers.com;
 messages.cutco.com              require_signed  messages.cutco.com;
 message.sema.org                require_signed  message.sema.org;
+messages.frame.io               require_signed  messages.frame.io;
 messages.globalindustrial.com   require_signed  messages.globalindustrial.com;
 messages.homeaway.com           require_signed  messages.homeaway.com;
 messages.kbb.com                require_signed  messages.kbb.com;
 messages.medicinenet.com        require_signed  messages.medicinenet.com;
+messages.squareup.com           require_signed  "messages.squareup.com,amazonses.com";
 messages.webmd.com              require_signed  messages.webmd.com;
 message.wine.com                require_signed  message.wine.com;
+messaging.squareup.com          require_signed  "messaging.squareup.com,amazonses.com";
 messaging.usnews.com            require_signed  messaging.usnews.com;
+messaging.yelp.com              require_signed  yelp.com;
 messaging.zoosk.com             require_signed  messaging.zoosk.com;
 metroexhibits.com               require_signed  metroexhibits.com;
 metuchensportsplex.com          require_signed  rockvillesports.ccsend.com;
 mfp.underarmour.com             require_signed  mfp.underarmour.com;
+mg.hadco-metal.com              signed_white    mg.hadco-metal.com;             // unsigned via impactia.com
 mgmresorts.com                  require_signed  mgmresorts.com;
 mg.starbucks.com                require_signed  mg.starbucks.com;
 mholland.com                    require_signed  mhollandco.onmicrosoft.com;
 mic.com                         require_signed  mic.com;
 michaelkorsemail.com            require_signed  michaelkorsemail.com;
+microcenterinsider.com          require_signed  microcenterinsider.com;
 microsoft.com                   require_signed  microsoft.com;
 microsoftonline.com             require_signed  microsoftonline.com;
 midjerseychamber.org            require_signed  "*.ccsend.com";
@@ -1684,19 +1851,21 @@
 minime.nsta.org                 require_signed  minime.nsta.org;
 minnesotavikingsemail.com       require_signed  minnesotavikingsemail.com;
 miraclesuit.com                 require_signed  miraclesuit.com;
+mlb.com                         require_signed  majorleaguebaseball.onmicrosoft.com;
 ml.com                          require_signed  ct-mail.ml.com;
 mlivenyc.com                    require_signed  cvent-planner.com;
 m.mail.coursera.org             require_signed  m.mail.coursera.org;
 mmsonline.com                   require_signed  mmsonline.com;
 mms-updates.com                 require_signed  mms-updates.com;
+moasis.com                      require_signed  moasis-com.20150623.gappssmtp.com;
 mobileair.com                   require_signed  tiogahvac.onmicrosoft.com;
 mobiletechinc.com               require_signed  mobiletechinc.onmicrosoft.com;
 mobivity.com                    require_signed  mobivity.com;
-mobvious.media                  require_signed  mobvious.media;
+mobvious.media                  require_signed  "mobvious.media,mailchimpapp.net";
 modernmsg.com                   require_signed  "modernmsg.com,delivery.customeriomail.com";
 moes.com                        require_signed  email.punchh.com;
 momentumdash.com                require_signed  momentumdash.com;
-momentummgt.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+momentummgt.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 momscleanairforce.org           require_signed  server8839.e-activist.com;
 monotype.com                    require_signed  monotype.com;
 monster.com                     signed_white    monster.com;                    // some unsigned mail via mailsorter.be.tmpw.net;
@@ -1707,14 +1876,14 @@
 mortgagebankamerica.com         require_signed  emarketfocus.com;
 mosacks.com                     require_signed  mg.mosacks.com;
 mosaic.buzz                     require_signed  mosaic728.onmicrosoft.com;
-movavi.com                      require_signed  "mandrillapp.com,movavi.com";
+movavi.com                      require_signed  "mandrillapp.com,mailchimpapp.net,movavi.com";
 moveon.org                      require_signed  list.moveon.org;
 movies.fandango.com             require_signed  movies.fandango.com;
 movies.fandangonow.com          require_signed  movies.fandangonow.com;
 mp1.tripadvisor.com             require_signed  mp1.tripadvisor.com;
 mp.fitbit.com                   require_signed  mp.fitbit.com;
 mpma.net                        require_signed  mpma.ccsend.com;
-mrca.org                        require_signed  "smtpsendmail.com,smtp.com";
+mrca.org                        require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 mrrainbowcarpet.com             require_signed  yahoo.com;
 mrtireservice.info              require_signed  mrtireservice.info;
 mrtireservices.com              require_signed  "mrtireservices.com,mrtireservice.info";
@@ -1726,14 +1895,20 @@
 mtb.com                         require_signed  mtb.com;
 mtbopinions.com                 require_signed  mtbopinions.com;
 muckfestms.com                  require_signed  muckfestms.com;
-multibriefs.com                 require_signed  multibriefs.com;
+multibriefs.com                 signed_white    multibriefs.com;                // some unsigned mail via mimecast
 murphy4nj.com                   require_signed  "murphy4nj-com.20150623.gappssmtp.com,bounce.bluestatedigital.com";
 murphyforflorida.com            signed_white    bounce.bluestatedigital.com;
-musicacademy.org                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-musictoday.com                  require_signed  mg.musictoday.com;
+musicacademy.org                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+musictoday.com                  require_signed  "mg.musictoday.com,musictoday.com";
 musictogether.com               signed_white    musictogether.ccsend.com;       // some unsigned mail via mail.musictogether.com;
 mvsend.com                      require_signed  mvsend.com;
 mxtoolbox.com                   require_signed  mxtoolbox.com;
+myamextravel.com                require_signed  myamextravel.com;
+my.ba.com                       require_signed  my.ba.com;
+mybbb.org                       require_signed  "mybbb.org,auth.ccsend.com";
+mycase.com                      signed_white    mycase.com;                     // some unsigned mail from salesforce fails strong spf
+my.com                          unsigned_black  my.com;
+my.containerstore.com           require_signed  my.containerstore.com;
 myddi.com                       require_signed  myddi.com;
 myemma.com                      require_signed  myemma.com;
 my.erau.edu                     require_signed  myerauedu.onmicrosoft.com;
@@ -1745,32 +1920,39 @@
 mymaryandmartha.com             require_signed  mymaryandmartha.com;
 my.orbitz.com                   require_signed  my.orbitz.com;
 myperfectresume.com             require_signed  myperfectresume.com;
-myphillypark.org                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+myphillypark.org                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 mypromosupport.com              require_signed  mypromosupport.com;
 myrandf.com                     require_signed  myrandf.com;
 myschoolemails.com              require_signed  myschoolemails.com;
+my.store-emails.com             require_signed  my.store-emails.com;
 mystubhub.com                   require_signed  mystubhub.com;
 na.email.aa.com                 require_signed  na.email.aa.com;
 nagr.org                        require_signed  nagr.org;
 nailgundepot.com                require_signed  "nailgundepot.com,auth.ccsend.com";
 nailiteinc.com                  require_signed  nailiteinc.ccsend.com;
+namecheap.com                   require_signed  namecheap.com;
 narvar.com                      require_signed  narvar.com;
 nationalgunrights.org           require_signed  nationalgunrights.org;
 nationallawfoundation.com       require_signed  nationallawfoundation.com;
-nationformarriage.org           require_signed  "nationformarriage.org,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";          // needs spf for wrong keys from bluehornet
+nationformarriage.org           require_signed  "nationformarriage.org,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";          // needs spf for wrong keys from bluehornet
 natlmail.com                    require_signed  nationalmailmarketing.onmicrosoft.com;
-naturalinsight.com              signed_white    naturalinsight.onmicrosoft.com; // some unsigned mail from salesforce
+naturalinsight.com              signed_white    naturalinsight.onmicrosoft.com; // some unsigned mail via salesforce
+nature.com                      require_signed  nature.com;
 nature.org                      require_signed  "nature.org,mta-bbcspool.convio.net";
 navigant.com                    require_signed  navigant.com;
 navigantpace.com                require_signed  navigantpace.com;
 nazarethacademyhs.org           require_signed  nazarethacademyhs.onmicrosoft.com;  // seems to be thomasjpaul.com correspondent
-nazdar.com                      require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+nazdar.com                      require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+nbaa.org                        require_signed  nbaa.org;
+nbcuni.com                      require_signed  "nbcuni.onmicrosoft.com,e2ma.net";  // some unsigned mail via pphosted should pass strong spf
 nbstoremail.newbalance.com      require_signed  nbstoremail.newbalance.com;
+nccmedia.com                    require_signed  "nccmedia.com,nccmedia.onmicrosoft.com,spotcable.ccsend.com";    // unsigned mail should pass spf -all, some signed via cc
 nccn.org                        require_signed  cvent-planner.com;
 nclgs.com                       require_signed  "nclgs.onmicrosoft.com,auth.ccsend.com";
 nd.edu                          require_signed  "nd.edu,imodules.com";
 ndia.org                        signed_white    mmsend.com;                     // some unsigned mail directly from ndia.org
 nea.org                         require_signed  actionnetwork.org;
+neato.com                       signed_white    neato-com.20150623.gappssmtp.com;   // unsigned mail from their own mail servers fails strong spf
 nedm.asus.com                   require_signed  nedm.asus.com;
 neilsonmarketing.com            require_signed  icontactmail2.com;
 nejm.org                        require_signed  nejm.org;
@@ -1778,11 +1960,13 @@
 netgear.com                     require_signed  netgear.com;
 networkafterwork.com            require_signed  networkafterwork.com;
 neuropathytreatmentgroup.com    require_signed  neuropathytreatmentgroup.com;
+newarkrecycling.com             require_signed  newarkrecycling.com;
 newbay-media.com                require_signed  "newbay.cfmvmail.com,newbay2.cfmvmail.com";
 new.itunes.com                  require_signed  new.itunes.com;
 newletters.grccompliances.com   require_signed  newletters.grccompliances.com;
 news.alibris.com                require_signed  news.alibris.com;
 newsamerica.com                 require_signed  newsamerica-com.20150623.gappssmtp.com;
+news.bisnow.com                 require_signed  news.bisnow.com;
 news.bodybuilding.com           require_signed  news.bodybuilding.com;
 news.classiccarrestorationclub.com require_signed  news.classiccarrestorationclub.com;
 news.conservativeintel.com      require_signed  news.conservativeintel.com;
@@ -1795,6 +1979,7 @@
 newsletter.gearbest.com         require_signed  newsletter.gearbest.com;
 newsletter.movietickets.email   require_signed  newsletter.movietickets.email;
 newsletter.newyorker.com        require_signed  newsletter.newyorker.com;
+newsletter.pilotflyingj.com     require_signed  newsletter.pilotflyingj.com;
 newsletter.purposedriven.com    require_signed  newsletter.purposedriven.com;
 newsletters.care2.com           require_signed  care2.com;
 newsletter.selectquote.com      require_signed  newsletter.selectquote.com;
@@ -1805,6 +1990,7 @@
 news.moo.com                    require_signed  news.moo.com;
 news.pcm.com                    require_signed  news.pcm.com;
 news.pier1.com                  require_signed  news.pier1.com;
+news.purina.com                 require_signed  news.purina.com;
 news-rodalesorganiclife.com     require_signed  news-rodalesorganiclife.com;
 news.shiftdailynews.com         require_signed  news.shiftdailynews.com;
 news.southcommmail.com          require_signed  news.southcommmail.com;         // needs spf for broken signatures
@@ -1825,9 +2011,10 @@
 nisolo.com                      require_signed  nisolo.com;
 njbiz.com                       require_signed  "journalpub1.onmicrosoft.com,njbiz.com";
 njsba.com                       signed_white    "njsba.com,bluehornet.com";     // some broken signatures from bluehornet
-nlmdlr.com                      require_signed  pool01.imakenews.net;
+nl.neuralit.com                 require_signed  nl.neuralit.com;
 nmajh.org                       require_signed  nmajh.ccsend.com;
 nmk.printegra.com               require_signed  nmk.printegra.com;
+nmss.org                        require_signed  "muckfestms.com,mta-bbcspool.convio.net";
 noozhawk.com                    require_signed  noozhawk.com;
 nordstrom.com                   require_signed  "nordstrom.com,amazonses.com";
 noreply1.ebay.com               require_signed  ebay.com;
@@ -1842,6 +2029,7 @@
 notices.rei.com                 require_signed  notices.rei.com;
 notification.capitalone.com     require_signed  notification.capitalone.com
 notification.intuit.com         require_signed  notification.intuit.com;
+notifications.gmfinancial.com   require_signed  notifications.gmfinancial.com;
 notifications.intuit.com        require_signed  notifications.intuit.com;
 notifications.networksolutions.com require_signed  notifications.networksolutions.com;
 notifications.pinterest.com     require_signed  notifications.pinterest.com;
@@ -1851,10 +2039,12 @@
 notify.transunion.com           require_signed  notify.transunion.com;
 novitex.com                     require_signed  pbmsnovitex.onmicrosoft.com;
 npm.org                         require_signed  "npm-org.20150623.gappssmtp.com,smtp.com,auth.ccsend.com";
+npr.org                         require_signed  npr.org;                        // some unsigned mail via pphosted should pass strong spf
+npsights.com                    require_signed  rnsights.com;
 nrailafrontlines.com            require_signed  nrailafrontlines.com;
 nrdc.org                        require_signed  nrdc1.onmicrosoft.com;
 nsbaadvocate.com                require_signed  mmsend.com;
-ntlpartner.com                  require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+ntlpartner.com                  require_signed  "*.getresponse.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 nvie.nevada.edu                 require_signed  nevadaie.ccsend.com;
 nyiad.edu                       require_signed  icontactmail1.com;
 nytimes.com                     signed_white    "nytimes.com,nytimes-com.20150623.gappssmtp.com";   // some unsigned mail via navisite.net not listed in their spf record
@@ -1880,10 +2070,10 @@
 officialpoc.com                 require_signed  smtpsend.com;                   // sam registration stuff
 offset.com                      require_signed  offset.com;
 ogjo-media.com                  require_signed  ogjo-media.com;                 // pennwell for neal
-ogunquitplayhouse.org           require_signed  ogunquitplayhouse.org;
+ogunquitplayhouse.org           signed_white    ogunquitplayhouse.org;          // password resets are unsigned from sendlabs.com not listed in spf
 okta.com                        require_signed  okta.com;
 oldnavy.com                     require_signed  oldnavy.com;
-olmcatholicschool.com           require_signed  "olmcatholicschool-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+olmcatholicschool.com           require_signed  "olmcatholicschool-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 olmrcs.com                      require_signed  olmrcs-com.20150623.gappssmtp.com;
 omegamoulding.com               signed_white    omega-moulding-company.ccsend.com;  // unsigned mail from their own servers, broken spf record so no fallback
 online.att-mail.com             require_signed  online.att-mail.com;
@@ -1892,7 +2082,7 @@
 online.essentra.com             require_signed  online.essentra.com;
 online.wsfsbank.com             require_signed  online.wsfsbank.com             // unsigned mail should pass spf -all
 onmogul.com                     require_signed  onmogul.com;
-onpeak.com                      require_signed  "onpeak.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+onpeak.com                      require_signed  "onpeak.com,viadcorp.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 onvia.com                       require_signed  onvia.com;
 oo-software.com                 require_signed  oo-software.com;
 opayq.com                       require_signed  opayq.com;
@@ -1901,10 +2091,10 @@
 operaphila.org                  require_signed  operaphila.org;
 oppenheimerfunds.com            require_signed  oppenheimerfunds.com;
 ops.bloomingdales.com           require_signed  ops.bloomingdales.com;
-optx2020.com                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+optx2020.com                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 orastudios.com                  require_signed  orastudios.com;
 orbuscompany.com                require_signed  orbuscompany.onmicrosoft.com;
-orbus.com                       require_signed  "orbuscompany.onmicrosoft.com,orbus.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+orbus.com                       require_signed  "orbuscompany.onmicrosoft.com,orbus.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 order.potterybarnkids.com       require_signed  order.potterybarnkids.com;
 orders.homedepot.com            require_signed  orders.homedepot.com;
 order.williams-sonoma.com       require_signed  order.williams-sonoma.com;
@@ -1912,12 +2102,13 @@
 os-email.com                    require_signed  os-email.com;
 os-media.com                    require_signed  os-media.com;
 osv.com                         require_signed  osvparish.ccsend.com;
-ottingergolf.com                require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net,scotlandrun.ccsend.com";
-ottolearn.com                   require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+ottingergolf.com                require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net,scotlandrun.ccsend.com";
+ottolearn.com                   require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 ourrevolution.com               require_signed  ourrevolution.com;
 ourtime.com                     require_signed  ourtime.com;
 outdoorfest.com                 require_signed  outdoorfest.com;
 outfrontmedia.com               require_signed  "cbsoa.onmicrosoft.com,auth.ccsend.com";
+outlooknewspapers.com           require_signed  outlooknewspapers.onmicrosoft.com;
 outsiderclub.com                require_signed  "outsiderclub.com,bluehornet.com";
 outsource.com                   require_signed  outsource.com;
 overnightkitchens.com           require_signed  overnightkitchens.com;
@@ -1928,7 +2119,7 @@
 paalerts.com                    require_signed  paalerts.com;                   // broken signatures, but passes spf
 pac-cap.com                     require_signed  thelakearrowheadvillage.ccsend.com;
 pacific.edu                     require_signed  "imodules.com,bluehornet.com";
-pacificmachinetools.com         require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+pacificmachinetools.com         require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 pacmail.em.marketinghq.net      require_signed  pacmail.em.marketinghq.net;
 paintingwithatwist.com          require_signed  paintingwithatwist-com.20150623.gappssmtp.com;
 paintsquare.com                 require_signed  paintsquare.com;
@@ -1937,17 +2128,19 @@
 palmislandcaribbean.com         require_signed  zmaildirect.com;
 paloma.washingtonpost.com       require_signed  paloma.washingtonpost.com;
 pandora.com                     signed_white    "pandora.com,sg.pandora.com";   // some unsigned mail directly from pandora mail servers
+panerabreadnews.com             require_signed  panerabreadnews.com;
 pangeabuilders.com              require_signed  pangeabuilders.com;
 paperlesspost.com               require_signed  "paperlesspost.com,*.paperlesspost.com";
-paradigmimaging.com             require_signed  "store.smtp.bigcommerce.net,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+paradigmimaging.com             require_signed  "store.smtp.bigcommerce.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 parallels-universe.com          require_signed  parallels-universe.com;
 paramountsign.com               require_signed  "email.shopvox.com,paramountsign-com.20150623.gappssmtp.com"
 parcelpending.com               require_signed  parcelpending.com;
 parkrideflyusa.com              require_signed  "yo155.com,publicaster.com,bsftransmit7.com";
-partsgeek.com                   require_signed  "smtpserver.email,smtpsendmail.com,partsgeek.ccsend.com";
-pasadenaindependent.com         require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-pasadenarose.com                require_signed  "pasadenarose-com.20150623.gappssmtp.com,pasadenamonthly.ccsend.com";
-passyunk.org                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+partners.woodsmith.com          require_signed  partners.woodsmith.com;
+partsgeek.com                   require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com,partsgeek.ccsend.com";
+pasadenaindependent.com         require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+pasadenarose.com                require_signed  "pasadenarose-com.20150623.gappssmtp.com,*.ccsend.com,*.hubspotemail.net";
+passyunk.org                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 pastorrick.com                  require_signed  bluehornet.com;
 patientconnect365.com           require_signed  patientconnect365.com;
 patients.pgsurveying.com        require_signed  patients.pgsurveying.com;
@@ -1959,16 +2152,19 @@
 paylocity.com                   require_signed  paylocity.com;
 paypal.com                      require_signed  paypal.com;
 payproglobal.com                require_signed  email.payproglobal.com;
-payrollcentric.com              require_signed  "smtpserver.email,smtpsendmail.com,smtp.com,em.evolutionhcm.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+payrollcentric.com              signed_white    "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com,em.evolutionhcm.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";  // some unsigned mail via their own servers
 payrollcentric.zendesk.com      require_signed  "gmailmarkup.zendesk.com,zendesk.com";
 payroll.fidelity.com            require_signed  payroll.fidelity.com;
 paytrace.com                    require_signed  paytrace.com;
 pb.com                          signed_white    pbinc.onmicrosoft.com;          // some unsigned mail via exacttarget not listed in their spf record
 pda.org                         require_signed  pda.org;
 pdffiller.com                   require_signed  pdffiller.com;
-peakhourapp.com                 require_signed  "peakhourapp-com.20150623.gappssmtp,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+peakhourapp.com                 require_signed  "peakhourapp-com.20150623.gappssmtp,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+pearison.com                    require_signed  pearison.onmicrosoft.com;
 peavit.com                      require_signed  netorgft2525885.onmicrosoft.com;
+pemail.lq.com                   require_signed  pemail.lq.com;
 pennfuture.org                  require_signed  salsalabs.org;
+pennockins.com                  require_signed  pennockins.ccsend.com;
 pennsylvanialotteryemail.com    require_signed  pennsylvanialotteryemail.com;
 pennsys.com                     signed_white    quosal.com;                     // some unsigned mail
 penske.com                      require_signed  penske.com;
@@ -1979,6 +2175,7 @@
 perrinconferences.com           require_signed  perrinconferences.ccsend.com;
 petmountain.com                 require_signed  "petmountain.com,amazonses.com";
 petro-media.com                 require_signed  petro-media.com;                // pennwell for neal
+petsuppliesplusemail.com        require_signed  petsuppliesplusemail.com;
 pfizer.com                      require_signed  "pfizer.com,yrb.onmicrosoft.com";
 pgisports.com                   require_signed  infusionmail.com;
 pharmacy.cvs.com                require_signed  pharmacy.cvs.com;
@@ -1988,6 +2185,7 @@
 phila.gov                       signed_white    "phila.onmicrosoft.com,auth.ccsend.com";    // unsigned via exacttarget not listed in their spf record
 philamuseum.org                 signed_white    "cmail19.com,cmail20.com";      // some unsigned mail via outlook
 philly.com                      require_signed  philly.com;
+phillyfitmagazine.com           require_signed  phillyfit.ccsend.com;
 phillyleagues.com               require_signed  phillyleagues.ccsend.com;
 phillynewssubscriptionservices.com      require_signed  phillynewssubscriptionservices.com;
 phillypaws.org                  require_signed  icontactmail9.com;
@@ -1996,7 +2194,8 @@
 philmontcc.org                  require_signed  philmontcc.org;
 philorch.org                    require_signed  philorch.org;
 photoemail.walgreens.com        require_signed  photoemail.walgreens.com;
-physiqonomics.com               require_signed  ckmail4.com;
+phs.org                         require_signed  phs.org;
+physiqonomics.com               require_signed  "ckmail4.com,*.convertkit.com";
 piab.com                        require_signed  piab.com;
 pianet.org                      require_signed  "moon-ray.com,mmsend.com";
 pika-energy.com                 require_signed  pika-energy-com.20150623.gappssmtp.com;
@@ -2023,25 +2222,29 @@
 postergarden.com                require_signed  postergarden.com;
 powell.com                      require_signed  powell.com;
 ppfa.org                        require_signed  ppfa.org;
-precise-law.com                 require_signed  "preciseinc1.onmicrosoft.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+precise-law.com                 require_signed  "preciseinc1.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+preferredcfo.com                require_signed  preferredcfo-com.20150623.gappssmtp.com;
 premierenergygroup.com          require_signed  premierenergygroup.ccsend.com;
 premiergoldupdate.com           require_signed  premiergoldupdate.com;
 premium.shiftdailynews.com      require_signed  premium.shiftdailynews.com;
 premiumstore.com                require_signed  premiumstore.com;
 presscorp.org                   require_signed  presscorp.org;
 primalsourcenews.com            require_signed  primalsourcenews.com;
-princetheater.org               signed_white    "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+princetheater.org               signed_white    "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 printavo.com                    require_signed  printavo.com;
 printmediamn.com                require_signed  northlightcolor.ccsend.com;
 printpack.com                   require_signed  printpack-com.20150623.gappssmtp.com;
 privy.com                       require_signed  privy.com;
 procerahealth.com               require_signed  "procerahealth.com,auth.ccsend.com";
 procureware.com                 require_signed  procureware.com;
+prodivnet.com                   require_signed  email.prodivnet.com;
 producersesourcenews.com        require_signed  producersesourcenews.com;
 productionmachining.com         require_signed  productionmachining.com;
+progmechs.com                   require_signed  netorg1358023.onmicrosoft.com;
 progressiveagent.com            require_signed  b2b-mail.net;
 proofhq.com                     require_signed  proofhq.com;
 prop.trulia.com                 require_signed  prop.trulia.com;
+prospecthillco.com              require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 protradertoday.com              require_signed  protradertoday.com;
 providesupport.com              require_signed  providesupport.com;
 proxyvote.com                   require_signed  proxyvote.com;
@@ -2053,21 +2256,22 @@
 ptcommunity.com                 require_signed  mmmm.ccsend.com;
 ptc.starwoodhotelsemail.com     require_signed  ptc.starwoodhotelsemail.com;
 p.tigerdirect.com               require_signed  p.tigerdirect.com;
-ptynews.info                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+ptynews.info                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 publicdomainreview.org          require_signed  "publicdomainreview.org,amazonses.com"; // some broken signatures (missing dns key) from publicdomainreview.org
 public.govdelivery.com          require_signed  public.govdelivery.com;
 pub.mediadc.com                 require_signed  pub.mediadc.com;
 pub.zinio.com                   require_signed  pub.zinio.com;
 pugnationla.org                 require_signed  elasticemail.com;
 pumpitupfun.com                 require_signed  email.pumpitupfun.com;
+purdue.edu                      require_signed  purdue.edu;
 purewow.com                     require_signed  purewow.com;
 pvpusd.net                      require_signed  pvpusd.onmicrosoft.com;
-qgemail.com                     require_signed  qgemail.com;
-qualityliquorstore.com          require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+qualityliquorstore.com          require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 qualtrics-research.com          require_signed  qemailserver.com;
 queenmary.com                   require_signed  zmaildirect.com;
 queensboro.com                  require_signed  queensboro.com;
 quellrelief.com                 require_signed  "quellrelief.com,*.hubspotemail.net"
+quenchagency.com                require_signed  quenchagency-com.20150623.gappssmtp.com;
 questdiagnostics.com            require_signed  inbound.dcm8.com;
 questexnetwork.com              require_signed  questexnetwork.com;
 quinnipiac-info.org             require_signed  quinnipiac-info.org;
@@ -2079,12 +2283,13 @@
 rackspace.com                   require_signed  cp.rackspace.com;
 radke.co                        require_signed  radke-co.20150623.gappssmtp.com;
 raise3d.freshdesk.com           require_signed  freshdesk.com;
+raleysstores.com                require_signed  raleysstores.com;
 rallypoint.com                  require_signed  rallypoint.com;
 randjsc.com                     require_signed  randjsc.onmicrosoft.com;
 randpac.com                     require_signed  bluehornet.com;
-randstadusa.com                 require_signed  rfo.contacts.randstadusa.com;
+randstadusa.com                 require_signed  "*.randstadusa.com";
 randybryceforcongress.com       require_signed  "bounce.bluestatedigital.com,bounce.myngp.com";
-rapidnews.com                   require_signed  "rapidnews-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+rapidnews.com                   require_signed  "rapidnews-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 ravepro.com                     require_signed  icontactmail1.com;
 rbc.com.pa                      require_signed  "rbc-com-pa.20150623.gappssmtp.com,mpdkim2.ch";
 rcam.target.com                 require_signed  rcam.target.com;
@@ -2092,11 +2297,13 @@
 realage-mail.com                require_signed  realage-mail.com;
 recordreform.com                require_signed  medquest.ccsend.com;
 reddit.com                      require_signed  reddit.com;
-redlandstruckservice.com        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+redheartland.com                require_signed  redheartland.com;
+redlandstruckservice.com        require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+redtri.com                      require_signed  "redtri-com.20150623.gappssmtp.com,redtri.com,amazonses.com";
 refinery29.com                  require_signed  "refinery29.com,refinery29-com.20150623.gappssmtp.com";
-regus.com                       signed_white    "regus.com,regusgroupservices.onmicrosoft.com,mandrillapp.com"; // some unsigned mail from e-dunning
+regus.com                       signed_white    "regus.com,regusgroupservices.onmicrosoft.com,mandrillapp.com,mailchimpapp.net"; // some unsigned mail from e-dunning
 rel1.aeroplan.com               require_signed  rel1.aeroplan.com;
-religioussupply.com             require_signed  religioussupplies.com;
+religioussupply.com             require_signed  "religioussupplies.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 reminder10.creditkarma.com      require_signed  reminder.creditkarma.com;
 reminder11.creditkarma.com      require_signed  reminder.creditkarma.com;
 reminder5.creditkarma.com       require_signed  reminder.creditkarma.com;
@@ -2108,10 +2315,11 @@
 remindmemd.com                  require_signed  remindmemd.com;
 rentalcars.com                  require_signed  rentalcars.com;
 rentlooker.site                 require_signed  amazonses.com;
+rentmanager.com                 require_signed  rentmanager.com;                // unsigned, but passes strong spf
 replies.charlestyrwhitt.com     require_signed  replies.charlestyrwhitt.com;
 reply1.ebay.com                 require_signed  reply1.ebay.com;
 reply.boltonpac.com             require_signed  reply.boltonpac.com;
-reply.broadwaydiscounts.com     require_signed  reply.broadwaydiscounts.com;
+reply.broadwaydiscounts.com     require_signed  "reply.broadwaydiscounts.com,broadwaydiscounts.com";
 reply.bronto.com                require_signed  bronto.com;
 reply.ebay.com                  require_signed  ebay.com;
 reply.gopinsiderbrief.com       require_signed  reply.gopinsiderbrief.com;
@@ -2124,29 +2332,33 @@
 resnap.com                      require_signed  resnap.com;
 resnexus.com                    require_signed  resnexus.com;
 resonantmastering.com           require_signed  resonantmastering-com.20150623.gappssmtp.com;
+response.americanexpress.com    require_signed  response.americanexpress.com;
 response.ebags.com              require_signed  response.ebags.com;
 response.nfcu.org               require_signed  response.nfcu.org;
 revinate.com                    require_signed  inguest.com;
+revistaflap.com.br              require_signed  revistaflap.onmicrosoft.com;
 re.walgreens.com                require_signed  re.walgreens.com;
 rewards.shopyourwayrewards.com  require_signed  rewards.shopyourwayrewards.com;
 rewardupdates.wholefoodsmarket.com require_signed  rewardupdates.wholefoodsmarket.com;
+reyesccb.com                    require_signed  reyesholdings.onmicrosoft.com;
 r.groupon.com                   require_signed  r.groupon.com;
 rht.com                         require_signed  roberthalf.onmicrosoft.com;
-ricardoalmeida.com              require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+ricardoalmeida.com              require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 richardsolomonreplies.com       require_signed  richardsolomonreplies.com;
 richmondproductions.com         signed_white    richmondproductions-com.20150623.gappssmtp.com; // diane@solvang
 rickwarren.org                  require_signed  bluehornet.com;
-rimage.com                      signed_white    rimagede.onmicrosoft.com;       // broken spf - multiple inconsistent records
+rimage.com                      require_signed  rimagede.onmicrosoft.com;       // some unsigned mail passes strong spf
 rimsd.k12.ca.us                 require_signed  rimoftheworldu.onmicrosoft.com;
 riogrande.com                   require_signed  riogrande.com;
 riponprinters.com               require_signed  riponprinters.ccsend.com;
 rismedia-enews.com              require_signed  rismedia-enews.com;
+rittenhousehotel.com            require_signed  contact-client.com;
 ritz-ritz.us                    require_signed  ritz-ritz.us;
 rlsassociates.com               require_signed  icontactmail3.com;
 rmsmg.com                       require_signed  rmsmg.com;                      // opoc_leaking for mbmg client
 roberthalf.com                  signed_white    roberthalf.onmicrosoft.com;     // some unsigned via geninfo.com
 robsonforensic.com              signed_white    "*.shared.hubspot.com";         // unsigned mail from their barracuda servers
-roku.com                        require_signed  roku.onmicrosoft.com;
+roku.com                        signed_white    roku.onmicrosoft.com;           // unsigned billing mail via ariasystems.net not listed in their spf record
 roomster.com                    require_signed  roomster.com;
 rosewe.com                      require_signed  rosewe.com;
 roundabouttheatre.org           require_signed  roundabouttheatre.org;
@@ -2154,12 +2366,14 @@
 rply.b21pubs.com                require_signed  netatlantic.com;
 rrca.org                        require_signed  rrca.ccsend.com;
 rs.email.nextdoor.com           require_signed  email.nextdoor.com;
+rsu21.net                       require_signed  rsu21.net;
 rt.email.aa.com                 require_signed  rt.email.aa.com;
 rubinproperties.com             require_signed  rubinproperties-com.20150623.gappssmtp.com;
 rubinproperties.mailer.appfolio.us require_signed  appfolio.com;
 runsignup.com                   require_signed  runsignup.com;
 ruthschrismail.com              require_signed  ruthschrismail.com;
 rwealthmanagement.com           require_signed  rwealthmanagement-com.20150623.gappssmtp.com;
+rwlynch.com                     require_signed  "rwlynch.com,e2ma.net";
 rwu.edu                         require_signed  technolutions.net;
 rxhealthalerts.com              require_signed  rxhealthalerts.com;
 rxorder.walgreens.com           require_signed  rxorder.walgreens.com;
@@ -2168,24 +2382,32 @@
 safesend.com                    require_signed  safesend.com;
 salamanderhotels.com            require_signed  salamanderhotels.com;
 salamanderresort.com            require_signed  "salamanderresort.com,salamanderhotels.com";
+salonrunner.com                 require_signed  salonrunner.com;
 samplingsupplies.com            require_signed  samplingsupplies.com;
-sandpiperrental.com             require_signed  "sandpiperrental.com,amazonses.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";;
+sandpiperrental.com             require_signed  "sandpiperrental.com,amazonses.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";;
 sanofi.com                      require_signed  sanofi.com;                     // unsigned spam via exacttarget
 santamariasun.com               require_signed  santamariasun-com.20150623.gappssmtp.com;
+santander.us                    require_signed  santander.us;
 sap.com                         signed_white    bluehornet.com;                 // probably other signers
 save.nature.org                 require_signed  save.nature.org;
 save.spirit-airlines.com        require_signed  save.spirit-airlines.com;
+savingthewest.org               signed_white    savingthewest.org;              // unsigned mail via mailchimp
 sbcsd.org                       require_signed  sbcsd.onmicrosoft.com;
+sbgtv.com                       require_signed  sbgtv.com;
 sbpub.com                       require_signed  "publicaster.com,bsftransmit7.com";
 sbs.nyc.gov                     require_signed  "auth.ccsend.com,nycsbs.ccsend.com";
+sc.com                          require_signed  sc.com;
 schedulepayment.com             require_signed  schedulepayment.com;
 schoology.com                   require_signed  email.schoology.com;
 schoox.com                      require_signed  mail.intercom.io;
 scoremorerewards.com            require_signed  scoremorerewards.com;
 scotnery.com                    require_signed  scotnery.com;
+scottthomasid.com               require_signed  scottthomasid.com;
 scoutbook.com                   require_signed  scoutbook.com;
-scouting.org                    require_signed  "scouting.org,scouting.ccsend.com";
+scouting.org                    require_signed  "scouting.org,doubleknot.com,scouting.ccsend.com";
 scoutmob.com                    require_signed  scoutmob.com;
+screamervision.com              require_signed  screamervision-com.20150623.gappssmtp.com;
+scripps.com                     require_signed  ewscripps.onmicrosoft.com;
 scup.org                        require_signed  em.secureserver.net;
 scwmediasystems.com             signed_white    outlook.com;
 sdi.com                         require_signed  sdi2.onmicrosoft.com;
@@ -2196,8 +2418,9 @@
 secure.fraudarmorservice.com    require_signed  secure.fraudarmorservice.com;
 secure.norton.com               require_signed  secure.norton.com;
 secureserver.net                require_signed  em.secureserver.net;
+security.co.uk                  require_signed  security.co.uk;                 // unsigned mail should pass spf -all
 selectmedical.com               require_signed  selectmedical.com;
-sellerlabs.com                  require_signed  "sellerlabs.com,dripemail2.com,pm.mtasv.net";
+sellerlabs.com                  require_signed  "sellerlabs.com,*.acemsrvb.com";
 send.grammarly.com              require_signed  send.grammarly.com;
 sendtax.hrblock.com             require_signed  sendtax.hrblock.com;
 sennheiser.com                  require_signed  sennheiseroffice365.onmicrosoft.com;
@@ -2208,10 +2431,12 @@
 service.dealer-enews.com        require_signed  service.dealer-enews.com;
 service.govdelivery.com         require_signed  service.govdelivery.com;
 service.grainger.com            require_signed  service.grainger.com;
+service.readyrefresh.com        require_signed  nestle.onmicrosoft.com;
 service.shutterstockmail.com    require_signed  shutterstockmail.com;
 services.target.com             require_signed  services.target.com;
 service.stubhub.com             require_signed  service.stubhub.com;
 service.target.com              require_signed  service.target.com;
+servicetitan.com                require_signed  servicetitan.com;
 servicing.plenti.com            require_signed  servicing.plenti.com;
 servicing.synchronyfinancial.com require_signed servicing.synchronyfinancial.com;
 sesenergy.org                   require_signed  secureenergy.onmicrosoft.com;
@@ -2232,17 +2457,19 @@
 shop.c21stores.com              require_signed  shop.c21stores.com;
 shopcandelabra.com              require_signed  shopcandelabra.ccsend.com;
 shopdeluxe.com                  require_signed  deluxe.onmicrosoft.com;
-shopify.com                     require_signed  "shopify.com,zendesk.com";
+shopify.com                     require_signed  "shopify.com,zendesk.com,*.hubspot.com";
 shop.newbalance.com             require_signed  shop.newbalance.com;
 shoppermarketing.ims-stats.com  require_signed  shoppermarketing.ims-stats.com;
 shopping.hammacher.com          require_signed  "shopping.hammacher.com,email.triggermail.io";
 shopping.ibemail.com            require_signed  shopping.ibemail.com;
-shoprunner.com                  require_signed  shoprunner.com;
+shoprunner.com                  signed_white    shoprunner.com;                 // some unsigned mail via salesforce
 shopspring.com                  require_signed  shopspring.com;
+shop.stevemadden.com            require_signed  "stevemadden.com,shop.stevemadden.com";
 shoptalk.com                    require_signed  shoptalk.com;
 shoptiques.com                  require_signed  shoptiques.com;
 shutterstockmail.com            require_signed  shutterstockmail.com;
 siegelagency.com                require_signed  "siegelagency.ccsend.com,pptsend03.com";
+siftly.com                      require_signed  siftly.com;
 signaturehardware.com           require_signed  signaturehardware.com;
 signnow.com                     require_signed  signnow.com;
 signprosystems.com              require_signed  orbus.ccsend.com;
@@ -2250,8 +2477,9 @@
 simon.com                       require_signed  simon.com;
 sircon.com                      require_signed  vertafore.onmicrosoft.com;
 siriusxm.com                    require_signed  siriusradio.onmicrosoft.com;
-sixtyfourmusic.com              require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+sixtyfourmusic.com              require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 sjbde.org                       require_signed  sjbde-org.20150623.gappssmtp.com;
+s.jcpenney.com                  require_signed  s.jcpenney.com;
 sjf.com                         require_signed  sjf.ccsend.com;
 skechers-alerts.com             require_signed  skechers-alerts.com;
 skechers.com                    require_signed  bluehornet.com;
@@ -2260,10 +2488,11 @@
 skuvault.com                    require_signed  skuvault.com;
 slack.com                       require_signed  slack.com;
 slinfo.pptsend02.com            require_signed  slinfo.pptsend02.com;
+slnews.pptsend02.com            require_signed  slnews.pptsend02.com;
 s.logmein.com                   require_signed  s.logmein.com;
 smartpros.com                   require_signed  smartpros.com;
 smart-shopping.thredup.com      require_signed  smart-shopping.thredup.com;
-smathersandbranson.com          require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+smathersandbranson.com          require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 sm.ihg.com                      require_signed  sm.ihg.com;
 smith-wesson.com                require_signed  icontactmail1.com;
 smitv.org                       require_signed  "netorg1915413.onmicrosoft.com,auth.ccsend.com";
@@ -2279,6 +2508,7 @@
 socialsecurityworks.org         require_signed  sg.actionnetwork.org;
 societyforscience-email.com     require_signed  societyforscience-email.com;
 socksaddict.com                 require_signed  bronto.com;
+soldierfield.net                require_signed  icontactmail2.com;
 sony.com                        signed_white    sony.onmicrosoft.com;           // some unsigned mail via lightpath
 sos.ca.gov                      require_signed  "californiagold.onmicrosoft.com,auth.ccsend.com";
 soul-cycle.com                  require_signed  e2ma.net;
@@ -2293,9 +2523,11 @@
 spiceworks.com                  require_signed  spiceworks.com;
 spie.org                        require_signed  spieorg.onmicrosoft.com;
 splitly.com                     require_signed  splitly.com;
+sportscardigest.com             require_signed  aweber.com;
+sports.yahoo.com                require_signed  sports.yahoo.com;
 spotcrime.com                   require_signed  spotcrime.com;
 spotify.com                     require_signed  spotify.com;
-springboardmedia.com            require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+springboardmedia.com            require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 springer.com                    require_signed  springer.com;
 springeronline.com              require_signed  springeronline.com;
 sprint.delivery.net             require_signed  sprint.delivery.net;
@@ -2310,18 +2542,19 @@
 standunited.org                 require_signed  "standunited.org,mailings.standunited.org";
 stanford.edu                    require_signed  "stanford.edu,office365stanford.onmicrosoft.com";
 stanfordhealthcare.org          signed_white    sbshare1.wc08.net;              // might have some other signers
-staplesadvantage.com            require_signed  yotpo.com;
+staplesadvantage.com            require_signed  "staplesadvantage.com,yotpo.com";
 staples.com                     signed_white    "ussicorp5.onmicrosoft.com,mktroute.com";   // some unsigned mail via salesforce
 statefarminfo.com               require_signed  statefarminfo.com;
 state.gov                       require_signed  state.gov;
 state.mn.us                     require_signed  mn365.onmicrosoft.com;
-statnews.com                    require_signed  "statnews.com,statnews-com.20150623.gappssmtp.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+statnews.com                    require_signed  "statnews.com,statnews-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 steeleassetmanagement.net       require_signed  gmail.com;
 steelforge.com                  require_signed  b2b-mail.net;
-sterlinglimoservice.com         require_signed  aro365516309.onmicrosoft.com;
+sterlinglimoservice.com         require_signed  "aro365516309.onmicrosoft.com,limoemailmarketing.com";
 stjstr.org                      require_signed  "stjstr-org.20150623.gappssmtp.com,mystudentsprogress.com";
 stonybrook-u.org                require_signed  stonybrook-u.org;
 store.aabacosmallbusiness.com   require_signed  yahoo.com;
+stores.lordandtaylor.com        require_signed  stores.lordandtaylor.com;
 store.yahoo.com                 require_signed  yahoo.com;
 stringacademyofwisconsin.org    require_signed  panthers.onmicrosoft.com;
 stripe.com                      require_signed  stripe.com;
@@ -2334,8 +2567,9 @@
 subscriptions.ssa.gov           require_signed  subscriptions.ssa.gov;
 subscription.theatlantic.com    require_signed  subscription.theatlantic.com;
 suggestedjobs.com               require_signed  suggestedjobs.com;
+sundance.org                    require_signed  sundance.org;
 suntrust.com                    require_signed  suntrust.com;
-superbrightleds.com             require_signed  "superbrightleds.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+superbrightleds.com             require_signed  "superbrightleds.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 superflypresents.com            signed_white    superflypresents.com;           // also from mailchimp, not listed in their spf record
 superior-phs.com                require_signed  superior-phs.ccsend.com;
 supermoon.com                   require_signed  supermoonla.onmicrosoft.com;
@@ -2344,6 +2578,7 @@
 support.org                     signed_black    sendgrid.net;                   // apple support scam
 support.yellowstone.org         require_signed  support.yellowstone.org;
 support.zappos.com              require_signed  zappos.com;
+surgeconsultantgroup.com        require_signed  surgeconsultantgroup-com.20150623.gappssmtp.com;
 susquis.com                     require_signed  spsend.com;
 sustainablebrands.com           require_signed  sustainablebrands.com;
 svemail.evesaddiction.com       require_signed  svemail.evesaddiction.com;
@@ -2356,16 +2591,21 @@
 swimsuitsforall.com             require_signed  swimsuitsforall.com;
 swmobileservice.com             require_signed  swmobileservice-com.20150623.gappssmtp.com;
 sws-mail.com                    require_signed  sws-mail.com;
+swstrings.com                   signed_white    swstrings.com;                  // unsigned mail from their web server
 sxsw.com                        require_signed  "sxsw.com,mmxreservations.com";
 symantec.rsys2.com              require_signed  rsys2.com;
 syncplicity.com                 require_signed  syncplicity.com;
 synergem.com                    require_signed  "synergem-com.20150623.gappssmtp.com,synergem.ccsend.com";
-syvchorale.org                  require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+synergysettlements.com          require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+syvchorale.org                  require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+tabshred.com                    require_signed  tabshred.com;
 talend.com                      require_signed  talend.com;
 talentsmartnewsletter.com       require_signed  email.talentsmartnewsletter.com;
 target-reporting.net            require_signed  email.broadcastsavings.com;     // dsgcreative
+tasc.tasconline.com             require_signed  lh1ondemand.com;
 tasmarketing.com                require_signed  tasmarketing.ccsend.com;
 tastingtable.com                require_signed  tastingtable.com;
+taxesinretirement567.com        require_signed  taxesinretirement567.com;
 taxformprinter.com              require_signed  taxformprinter.com;
 taxpracticepro.com              require_signed  taxpracticepro.com;
 taxprofessionalsresource.net    require_signed  taxprofessionalsresource.net;
@@ -2377,10 +2617,13 @@
 teapartypolitics.com            require_signed  teapartypolitics.com;
 teapartypoliticsnews.com        require_signed  teapartypoliticsnews.com;
 techforless-alerts.com          require_signed  techforless-alerts.com;
+t.e.freepeople.com              require_signed  t.e.freepeople.com;
 telescopecasual.com             require_signed  telescope.onmicrosoft.com;
 tennettmfg.com                  require_signed  tennettmfg.com;
 tenthousandvillages.com         require_signed  tenthousandvillages.com;
+terravidahc.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 terumomedical.com               require_signed  terumoamericas.onmicrosoft.com;
+test.com                        require_signed  test.com;                       // typically forged
 textnow.me                      require_signed  textnow.me;
 thankyou.citibank.com           require_signed  thankyou.citibank.com;
 thankyouemails.org              require_signed  thankyouemails.org;
@@ -2390,18 +2633,21 @@
 theatrephiladelphia.org         require_signed  theatrephiladelphia.ccsend.com;
 thechivery.com                  require_signed  thechivery.com;
 the-citizenry.com               require_signed  "the-citizenry.com,shopify.com,delivery.klaviyomail.com";
-the-efa.org                     require_signed  "the-efa.org,the-efa.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+thedailygrind.news              require_signed  thedailygrind.news;
+the-efa.org                     require_signed  "the-efa.org,the-efa.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 thefisherman.com                require_signed  thefisherman.ccsend.com;
 thegovconadvisors.com           require_signed  reachmail.net;
-thegramlist.com                 require_signed  thegramlist-com.20150623.gappssmtp.com;
-thehotviolinist.com             require_signed  "ckmail4.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+thegramlist.com                 require_signed  "thegramlist-com.20150623.gappssmtp.com,sendgrid.me,mailchimpapp.net";
+thehotviolinist.com             require_signed  "ck.thehotviolinist.com,ckmail4.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 thejurylab.com                  require_signed  icontactmail1.com;
 thelooploft.com                 require_signed  thelooploft.com;
 themagnetgroup.com              require_signed  themagnetgroup.com;
 themichigancatholicchoir.org    require_signed  papadantravel.com;
+theneed2know.com                signed_white    theneed2know.com;               // signing key dropped from dns, clever
+thenobleflame.com               require_signed  thenobleflame.com;
 theproducenews.com              require_signed  theproducenews.ccsend.com;
 therdstore.com                  require_signed  jetrord.ccsend.com;
-therealdeal.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+therealdeal.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 theselfimprovementgenie.com     require_signed  theselfimprovementgenie.com;
 theshadestore.com               require_signed  theshadestore.com;
 thesoccerwire.com               require_signed  hummersport.ccsend.com;
@@ -2411,40 +2657,46 @@
 thewarmingstore.com             require_signed  icontactmail1.com;
 thingiverse.com                 require_signed  thingiverse.com;
 thingtobring.com                require_signed  sendgrid.me;
+thinkadamslaw.com               require_signed  adamslawgroup.onmicrosoft.com;
+thinkla.org                     signed_white    "thinkla.org,thinkla-org.20150623.gappssmtp.com";   // unpublished key for mail via createsend
 thinknewmexico.org              require_signed  congressplus.com;
-thinoptics.com                  require_signed  "groupvine.com,bronto.com";
+thinoptics.com                  require_signed  "groupvine.com,bronto.com,*.klaviyomail.com";
 thirdlove.com                   require_signed  thirdlove.com;
-thomasnet.com                   require_signed  thomasnet.com;
+thomasnet.com                   signed_white    thomasnet.com;                  // some unsigned mail via amazonaws
 thomsonlinear.com               signed_white    fortive.onmicrosoft.com;        // some unsigned mail via salesforce
 thorntontomasetti.com           require_signed  thorntontomasetti.onmicrosoft.com;  // other spam signed by mailchimp
 thriftbooks.com                 require_signed  thriftbooks.onmicrosoft.com;
 thriftbooks-email.com           require_signed  thriftbooks-email.com;
+thriveglobal.com                require_signed  "thriveglobal.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 thrivemarket.com                require_signed  thrivemarket.com;
 ticketfly.com                   require_signed  ticketfly.com;
 ticketleap.com                  require_signed  "ticketleap.com,amazonses.com";
 ticketmaster.com                require_signed  ticketmaster.com;
 tickets.rugbyworldcup.com       require_signed  tickets.rugbyworldcup.com;
-tidio.net                       require_signed  "tidio.net,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
-tieivote.com                    require_signed  smtpserver.email;
+tidio.net                       require_signed  "tidio.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+tieivote.com                    require_signed  "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";
 timeout.com                     require_signed  timeout-com.20150623.gappssmtp.com;
 tiogahvac.com                   require_signed  tiogahvac.onmicrosoft.com;
+titanemail.com                  require_signed  "titanemail-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 t.kohls.com                     require_signed  t.kohls.com;
 t.mail.coursera.org             require_signed  t.mail.coursera.org;
 tm.vistaprint.com               require_signed  tm.vistaprint.com;
 tomarind.com                    require_signed  "netorgft1471273.onmicrosoft.com,tomarind.ccsend.com";
+tom.com                         require_signed  tom.com;                        // unsigned mail should pass spf -all
 tomudall.com                    signed_white    bounce.bluestatedigital.com;
+toolsource.com                  require_signed  yahoo.com;
 toomeyforsenate.com             require_signed  toomeyforsenate.com;
 toomey.senate.gov               require_signed  senate.gov;
-touchstonehomeproducts.com      signed_white    "yahoo.com,auth.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+touchstonehomeproducts.com      signed_white    "yahoo.com,auth.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 tower90230.com                  require_signed  tower90230.onmicrosoft.com;
 townhallmail.com                require_signed  townhallmail.com;
 trade.gov                       require_signed  trade.gov;
 traillink.com                   require_signed  traillink.com;
-training.compliancekey.net      require_signed  training.compliancekey.net;
 trainingmag.com                 require_signed  "*.n-email5.net,*.n-email.net"
 trans.duluthtradingemail.com    require_signed  trans.duluthtradingemail.com;
 transferwise.com                require_signed  transferwise.com;
 traveloni.com                   require_signed  "traveloni.com,traveloni.ccsend.com";
+travel-services.americanexpress.com     require_signed  travel-services.americanexpress.com;
 travismanion.org                require_signed  "travismanion.org,omktmail2.com,icontactmail9.com";
 treasuryandtradesolutions.citi.com require_signed  treasuryandtradesolutions.citi.com;
 trekbikes.com                   require_signed  e.trekbikes.com;
@@ -2461,12 +2713,14 @@
 t.spiritairlines.com            require_signed  t.spiritairlines.com;
 ttmail.timetrade.com            require_signed  timetrade.com;
 tuhs.temple.edu                 require_signed  tuhs.onmicrosoft.com;
+turner.com                      require_signed  turner.com;
 turnoutpac.org                  signed_white    bounce.bluestatedigital.com;
 tut.com                         require_signed  tut.ccsend.com;
 t.wilsonsleather.com            require_signed  t.wilsonsleather.com;
 twitter.com                     require_signed  twitter.com;
+tx.gov                          require_signed  tx.gov                          // block forged spam mail
 tx.redbox.com                   require_signed  tx.redbox.com;
-tycoint.com                     require_signed  tycointernational.onmicrosoft.com;
+tycoint.com                     require_signed  "tycoint.com,tycointernational.onmicrosoft.com";
 uber.com                        signed_white    "uber.com,sptrans.uber.com,spmail.uber.com";    // unsigned mail from sptrans.uber.com that fails spf
 uberconference.com              require_signed  uberconference.com;
 ubmcanon-info.com               require_signed  ubmcanon-info.com;
@@ -2484,7 +2738,8 @@
 unionhomemortgage.com           require_signed  eeoo.co;
 unionleague.org                 signed_white    "unionleague.org,unionleague.ccsend.com";   // some unsigned mail via ppe-hosted.com, wrong spf record, include: vs a:dispatch-us.ppe-hosted.com
 uniquephoto.com                 require_signed  uniquephoto.com;
-unitedyacht.com                 require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+united.com                      require_signed  united.com;                     // unsigned but passes spf
+unitedyacht.com                 require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 unitronics.com                  require_signed  unitronics.ccsend.com;
 universalsocceracademy.com      require_signed  universalsocceracademy.ccsend.com;
 universityproducts.com          signed_white    icontactmail3.com;              // unsigned mail from their own servers, no spf txt record
@@ -2495,7 +2750,9 @@
 update.santanderbank.com        require_signed  update.santanderbank.com;
 updates.conservativeintel.com   require_signed  updates.conservativeintel.com;
 updates.hayneedle.com           require_signed  updates.hayneedle.com;
+updates.sba.gov                 require_signed  updates.sba.gov;                // unsigned mail should pass spf -all
 updates.ticketnetworkdirect.com require_signed  updates.ticketnetworkdirect.com;
+updates.uscourts.gov            require_signed  updates.uscourts.gov;
 update.trulia.com               require_signed  update.trulia.com;
 uphs.upenn.edu                  signed_white    cvent-planner.com;              // some unsigned mail via en25
 uportland.org                   require_signed  uportland.org;
@@ -2523,7 +2780,8 @@
 value.kmart.com                 require_signed  value.kmart.com;
 value.sears.com                 require_signed  value.sears.com;
 vanguardcharitable.org          require_signed  cvent-planner.com;
-vehiclemerchandising.com        require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+variety.com                     require_signed  variety-com.20150623.gappssmtp.com;
+vehiclemerchandising.com        require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 venmo.com                       require_signed  venmo.com;
 verifone.com                    require_signed  "verifone.com,verifone365.onmicrosoft.com";
 veritivcorp.com                 signed_white    veritivcorp.onmicrosoft.com;    // unsigned via apexanalytix.com that fails spf
@@ -2537,8 +2795,8 @@
 virtualeventbags.com            require_signed  email.virtualeventbags.com;
 visitpartnerhub.com             require_signed  visitpartnerhub.com;
 visitwynn.com                   require_signed  visitwynn.com;
-visstun-digispec.com            require_signed  "smtpserver.email,smtpsendmail.com";
-vistana.com                     require_signed  iilg.onmicrosoft.com;           // some unsigned mail passes spf
+visstun-digispec.com            signed_white    "smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com";    // some unsigned mail via dspads.com fails strong spf
+vistana.com                     require_signed  "iilg.onmicrosoft.com,sendgrid.net";        // some unsigned mail passes strong spf
 vitalnetix.com                  require_signed  vitalnetix.onmicrosoft.com;
 vitaminmom.com                  require_signed  vitaminmom-com.20150623.gappssmtp.com;
 vivial.net                      require_signed  "vivial.net,email.nearsay.com";
@@ -2546,21 +2804,26 @@
 vlmservice.zendesk.com          require_signed  "zendesk.com,*.zendesk.com"
 vmg-dma.com                     require_signed  hb236.emailos.com;
 vmware.com                      require_signed  onevmw.onmicrosoft.com;
-voiceoverxtra.com               require_signed  "voiceoverxtra.ccsend.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+voiceoverxtra.com               require_signed  "voiceoverxtra.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+vonage.com                      require_signed  vonage.com;
 vote-now.com                    require_signed  vote-now.com;
+voxmedia.com                    require_signed  voxmedia.com;
 vsimedia.com                    require_signed  vsimedia.onmicrosoft.com;
 vt.edu                          signed_white    bsf01.com;                      // probably other sources also
+vyesports.com                   require_signed  vyesports-com.20150623.gappssmtp.com
 walmart.com                     require_signed  walmart.com;
 wanjugo.com                     require_signed  wanjugo.com;
+warnerbros.com                  require_signed  warnerbros.com;
 warriorcustomgolf.com           require_signed  warriorcustomgolf.com;
 washingtonpost.com              require_signed  washingtonpost.com;
 washjeff-info.org               require_signed  washjeff-info.org;
+washpost.com                    require_signed  washpost.onmicrosoft.com;
 washtimesnews.com               require_signed  washtimesnews.com;
 watchdog.net                    require_signed  sg.actionnetwork.org;
 watchmanmonitoring.com          require_signed  watchmanmonitoring.com;
 waterboards.ca.gov              require_signed  cawaterboards.onmicrosoft.com;
 wayfair.com                     require_signed  "wayfair.com,wayfair.onmicrosoft.com";
-wayneart.org                    require_signed  "mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+wayneart.org                    require_signed  "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 wdsearch.com                    require_signed  wdsearch.com;
 wdw.disneyonline.com            require_signed  disneyonline.com;
 wealthyretirement.com           require_signed  wealthyretirement.com;
@@ -2570,7 +2833,6 @@
 weather.com                     require_signed  weather.com;
 webcargo.net                    require_signed  webcargo.net;
 webervations.com                require_signed  webervations.com;
-webinar.compliancekey.net       require_signed  webinar.compliancekey.net;
 webopenings.com                 require_signed  webopenings.com;
 webstaurantstore.com            require_signed  webstaurantstore.com;
 weekly-bulletin.com             require_signed  weekly-bulletin.com;
@@ -2581,12 +2843,13 @@
 wellsfargorewards.com           require_signed  wellsfargorewards.com;
 wellspouse.org                  require_signed  wellspouse.org;
 wesendit.com                    require_signed  wesendit.com;
+westernunion.com                unsigned_black  westernunion.com;
 westgermanbmw.com               signed_white    "westgermanbmw.com,xtime.com";  // some unsigned mail via media-mastermind
 westinvacations.com             require_signed  iilg.onmicrosoft.com;
 westrock.com                    signed_white    westrockco.onmicrosoft.com;     // some unsigned mail via outlook
 weta.org                        require_signed  server8839.e-activist.com;
-wetransfer.com                  require_signed  email.wetransfer.com;
-wharton.upenn.edu               require_signed  "wharton.upenn.edu,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
+wetransfer.com                  require_signed  wetransfer.com;
+wharton.upenn.edu               require_signed  "wharton.upenn.edu,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 whcandy.com                     require_signed  whcandy.com;
 whitegraphics.com               require_signed  whitegraphics-com.20150623.gappssmtp.com;
 whitesharkmedia.com             require_signed  whitesharkmedia.com;
@@ -2595,6 +2858,7 @@
 williampenninn.com              require_signed  williampenninn.ccsend.com;
 windstream.net                  require_signed  caaonline.ccsend.com;
 wineawesomeness.com             require_signed  wineawesomeness.com;
+wingsmagazine.com               require_signed  wingsmagazine.com;
 winmo.com                       signed_white    "winmo.com,winmo-com.20150623.gappssmtp.com";   // missing winmo.com key in dns
 winzip.com                      require_signed  winzip.com;
 wisecompanyus.com               require_signed  "wisecompanyus.com,wisecompanyus.onmicrosoft.com";
@@ -2606,18 +2870,21 @@
 wolfforpa.com                   signed_white    bounce.bluestatedigital.com;
 wolfgordon.com                  require_signed  "wolfgordon.com,b2b-mail.net";
 womenshealthydiets.com          require_signed  womenshealthydiets.com;
-woodturner.org                  require_signed  aawwoodturner.ccsend.com;
+woodturner.org                  signed_white    aawwoodturner.ccsend.com;       // some unsigned mail via g2host.com
 woodworkingshop.com             require_signed  emailwoodworkingshop.com;
 woof.barkshop.com               require_signed  woof.barkshop.com;
 woof.chewy.com                  require_signed  woof.chewy.com;
 woolrich.com                    require_signed  woolrich.com;
 wordpress.com                   require_signed  wordpress.com;
 worknetoccmed.com               require_signed  worknetoccmed.com;
+worldmediaonline.com            require_signed  "worldmediaonline.onmicrosoft.com,auth.ccsend.com";
 worldsciencefestival.com        require_signed  worldsciencefestival.com;
 wrigley.com                     require_signed  "wrigley.com,e2ma.net";
 wsdisplay.com                   require_signed  wsdisplay-com.20150623.gappssmtp.com;
+wsfsbank.com                    require_signed  wsfsbank.com;
+wsj.com                         signed_white    "wsj.com,wsj-com.20150623.gappssmtp.com";   // some unsigned mail via iphmx.com
 wstelecomlaw.com                require_signed  sapronov.onmicrosoft.com;
-wtcphila.org                    require_signed  "wtcphila.onmicrosoft.com,wtcphila.ccsend.com";
+wtcphila.org                    require_signed  "wtcphila.onmicrosoft.com,wtcphila.ccsend.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 wullo.com                       require_signed  wullo.com;
 wunderman.com                   require_signed  yrb.onmicrosoft.com;
 wyattresearchnewsletters.com    require_signed  wyattresearchnewsletters.com;
@@ -2627,9 +2894,19 @@
 xks.com                         require_signed  xks.com;
 xlive.tm00.com                  require_signed  tm00.com;
 xode.com                        require_signed  xode.com;
+yahoo.ca                        unsigned_black  yahoo.ca;
+yahoo.co.in                     unsigned_black  yahoo.co.in;
+yahoo.co.jp                     unsigned_black  "yahoo.com,yahoo.co.jp";
+yahoo.com.my                    unsigned_black  yahoo.com.my;
+yahoo.com.tw                    unsigned_black  yahoo.com.tw;
+yahoo.com                       unsigned_black  yahoo.com;
+yahoo.co.uk                     unsigned_black  yahoo.co.uk;
+yahoo.de                        unsigned_black  yahoo.de;
+yahoo.fr                        unsigned_black  yahoo.fr;
 yahoo-inc.com                   require_signed  yahoo-inc.com;                  // password resets, etc
+yahoo.in                        unsigned_black  yahoo.in;
 yellowstone.org                 require_signed  mta-bbcspool.convio.net;
-yelp.com                        signed_white    yelp.com;                       // some unsigned mail from their own servers
+yelp.com                        require_signed  yelp.com;
 yipit.com                       require_signed  yipit.com;
 ymca-snoco.org                  require_signed  ymcasnoco.onmicrosoft.com;
 y.mileskimball.com              require_signed  y.mileskimball.com;
@@ -2640,10 +2917,12 @@
 yourdcdchocolatier.com          require_signed  yourdcdchocolatier.com;
 yourmembership.com              signed_white    yourmembership.com;             // some unsigned mail from their own servers
 yourpotlaw.com                  require_signed  yourpotlaw.com;
-yourstorewizards.com            signed_white    "yourstorewizards.com,yahoo.com,freshdesk.com,mandrillapp.com,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";   // some unsigned mail via usaepay.com
+yourstorewizards.com            signed_white    "yourstorewizards.com,yahoo.com,freshdesk.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";   // some unsigned mail via usaepay.com
 youthelitesports.org            require_signed  youthelitesports-org.20150623.gappssmtp.com;
 youtube.com                     require_signed  youtube.com;
+yuhsbstudents.org               require_signed  yuhsbstudents-org.20150623.gappssmtp.com;
 yummielife.com                  require_signed  yummielife.com;
+zambezi-la.com                  require_signed  zambezi-la-com.20150623.gappssmtp.com;
 zapier.com                      require_signed  zapier.com;
 zappos.com                      require_signed  zappos.com;
 zenfoliomail.com                require_signed  zenfoliomail.com;
@@ -2651,7 +2930,7 @@
 zixmessagecenter.com            require_signed  zixmessagecenter.com;
 zomato.com                      require_signed  zomato.com;
 zoomcake.com                    require_signed  zoomcake.com;
-zoom.us                         require_signed  zoom.us;
+zoom.us                         require_signed  "zoom.us,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net";
 zooprinting.com                 require_signed  eoncode.com;
 zorpia.com                      require_signed  zorpia.com;
 zortrax.com                     require_signed  "zortrax.com,emlgrid.com";