# HG changeset patch # User Carl Byington # Date 1556210856 25200 # Node ID 8ad675a5d448647f80cee915b7e030a62900863e # Parent 79e944269c0b359a920b0afe87d4ad5e0ddab045 update tld list diff -r 79e944269c0b -r 8ad675a5d448 dnsbl.dkim.conf --- a/dnsbl.dkim.conf Thu Apr 25 09:35:53 2019 -0700 +++ b/dnsbl.dkim.conf Thu Apr 25 09:47:36 2019 -0700 @@ -42,7 +42,7 @@ a4m.org require_signed sendgrid.info; aaabrasives.com require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; aaas.sciencepubs.org require_signed aaas.sciencepubs.org; -aa.com require_signed amrcorp.onmicrosoft.com; +aa.com require_signed "aa.com,amrcorp.onmicrosoft.com"; aadvantage.email.aa.com require_signed aadvantage.email.aa.com; aaepa.com require_signed "aaepa.onmicrosoft.com,americanacademytraining.com"; aaj.bulletinmedia.com require_signed bulletinmedia.com; @@ -158,7 +158,6 @@ alpha.gr require_signed alpha.gr; // unsigned but passes spf -all alpineescrow.net require_signed alpineescrowarrowhead.onmicrosoft.com; alro.com require_signed "alro.com,alrocorp.onmicrosoft.com"; -altigen.com require_signed zcsend.net; altramotion.com require_signed ptgnet4.onmicrosoft.com; alumniclass.com require_signed alumniclass.com; alumniclubs.columbia.edu require_signed "alumniclubs.columbia.edu,columbiabusiness.onmicrosoft.com"; @@ -188,6 +187,7 @@ anchoragemuseum.org require_signed anchoragemuseumassoc.onmicrosoft.com; anh-usa.org require_signed salsalabs.org; anpanama.com require_signed anpanama.com; +anthem.com require_signed anthem.com; anthempropane.com require_signed anthempropane.com; anthemww.com require_signed matw.onmicrosoft.com apgrents.com require_signed icontactmail6.com; @@ -200,6 +200,7 @@ appsheet.com require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; appulatemail.com require_signed appulatemail.com; aquafadas.com require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; +arcb.com require_signed "arcb.com;ptr:arcbtech.com"; archpaper.com signed_white archpaper.ccsend.com; // some unsigned mail via listrak armsanctuary.org require_signed mta-bbcspool.convio.net; arthurhall.com require_signed arthurhallins.onmicrosoft.com; @@ -247,6 +248,7 @@ bankofamerica.com require_signed bankofamerica.com; bankofinternet.com require_signed bankofinternet.com; barackobama.com require_signed barackobama.com +barracuda.com require_signed barracuda.com; // unsigned, but passes spf bartlettbearing.com require_signed "bartlettbearing.onmicrosoft.com,auth.ccsend.com"; basspronews.com require_signed basspronews.com; basusa.com signed_white myenrollservices.onmicrosoft.com; // some unsigned mail from their own servers with no spf record @@ -272,7 +274,7 @@ betabrand.com require_signed email.betabrand.com; bethelinn.com signed_white bounces.fanbridge.com; // some unsigned mail from their own servers not listed in their spf record betterworldbooks.com require_signed mailer.betterworldbooks.com; -bgeneral.com signed_white bgeneral.com; // some unsigned mail via bgeneral.com +bgeneral.com require_signed "bgeneral.com;ptr:bgeneral.com"; bhfs.com signed_white "bhfs.com,brownsteinhyattfarberschreck.onmicrosoft.com"; // temp errors, 0 bit key biblicalarchaeology.org require_signed biblicalarchaeology.wc08.net; bicycleadventures.com require_signed bicycleadventures.ccsend.com; @@ -359,7 +361,7 @@ callrail.com require_signed callrail.com; calparks.org require_signed mta-bbcspool.convio.net; calvaryabq.org require_signed calvaryabq.org; -camasb.org signed_white camasb.org; // some unsigned mail via coxmail that fails spf +camasb.org require_signed camasb.org; camprrm.com require_signed camprrm.ccsend.com; canstockphoto.com require_signed canstockphoto.com; cantaybailaconmigo.com require_signed musictogether.ccsend.com; @@ -383,6 +385,7 @@ cbre.com signed_white mailsvr.com; // some unsigned mail via ms *.outlook.com not listed in spf record cbs.com require_signed "cbs.onmicrosoft.com,recurly.com"; cbsd.org signed_white cbsd.onmicrosoft.com; // some unsigned mail via notification.com fails spf with -all +cbsinteractive.com require_signed cbsinteractive-com.20150623.gappssmtp.com; cbskyridge.com require_signed brianhall.onmicrosoft.com; cbslocal.com require_signed cbslocal.com; cbsnewsletter.com require_signed cbsnewsletter.com; @@ -408,7 +411,7 @@ chairmanmom.com require_signed chairmanmom.com; chambermusicinstitute.com require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; change.jetblue.com require_signed change.jetblue.com; -change.org signed_white change.org; // some unsigned mail via exacttarget +change.org require_signed change.org; channelfactory.com require_signed channelfactory-com.20150623.gappssmtp.com; charlesmichaelphotography.com require_signed emlr2.com; checkin.email.aa.com require_signed checkin.email.aa.com; @@ -513,7 +516,7 @@ crashplan.com require_signed crashplan.com; crcind.com require_signed crcglobal.onmicrosoft.com; create.paper-source.com require_signed create.paper-source.com; -creativecircle.com signed_white creativecircle.onmicrosoft.com; // some unsigned mail +creativecircle.com require_signed creativecircle.com; creativegroup.com require_signed "roberthalf.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; creativelive.com require_signed creativelive.com; creativemag.com signed_white creativemagazine.ccsend.com; // some unsigned mail via gmail @@ -521,7 +524,6 @@ creditkarma.com require_signed creditkarma.com; credit.paypal.com require_signed credit.paypal.com; credoaction.com require_signed "credoaction.com,controlshiftlabs.com"; -crexi.com require_signed crexi.com; crlnews.com require_signed "omktmail2.com,icontactmail1.com,icontactmail9.com"; csa.canon.com require_signed "mktroute.com,mktomail.com,mktdns.com,mktosender.com"; c-sgroup.com require_signed c-sgroup.com; @@ -551,10 +553,11 @@ dallasarboretum.org require_signed "dallasarboretum.onmicrosoft.com,auth.ccsend.com"; dandh.com signed_white email.clickdimensions.com; // unsigned mail from their own servers with no spf darkironfitness.com signed_white aweber.com; // some broken signatures from aweber that fail spf -dasd.org signed_white "bbnotify.net,infosnap.com"; // some unsigned mail via bbnotify +dasd.org require_signed dasd.org; dashlane.com require_signed dashlane.com; databreachtoday.com require_signed databreachtoday.com; datadist.com require_signed datadist.com; // unsigned mail should pass spf -all +dataxu.com require_signed dataxu.com; davidfrancisfurniture.com require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; davidsuzuki.org require_signed davidsuzuki.org; davios.com require_signed www-davios.ccsend.com; @@ -585,7 +588,7 @@ dhl.com require_signed dhl.com; diabetes.org require_signed mta-bbcspool.convio.net; dialpad.com require_signed dialpad.com; -diamondcu.com require_signed diamondcu.com; +diamondcu.com require_signed "diamondcu.com;ptr:pscu.com"; diamondmm.com require_signed icontactmail3.com; dickblick.com signed_white artstores.com; dieselpowergear.com require_signed "dieselpowergear.com,cmail19.com,cmail20.com"; @@ -601,10 +604,10 @@ discogs.com require_signed discogs.com; discountschoolsupply.com require_signed discountschoolsupply.com; discoverphl.com require_signed discoverphl.com; -discovery.com signed_white discoverycomm.onmicrosoft.com; // some unsigned mail via scrippsnetworks.com +discovery.com require_signed "discoverycomm.onmicrosoft.com;ptr:scrippsnetworks.com ptr:appiancloud.com"; discover.zinio.com require_signed discover.zinio.com; dishemail.com require_signed dishemail.com; -disney.com require_signed twdc.onmicrosoft.com; +disney.com require_signed "twdc.onmicrosoft.com;ptr:batblue.net"; // espn invoices via batblue not listed on disney spf -all ditech-notify.com require_signed ditech-notify.com; divenewsletter.com require_signed divenewsletter.com; diversityagenda.com require_signed theconferencecenter.ccsend.com; @@ -639,7 +642,7 @@ drpa.org require_signed "drpapatco.onmicrosoft.com,drpapatco.ccsend.com"; drsfostersmith.com require_signed drsfostersmith.com; drwc.org require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; -dscc.org signed_white dscc.org; // some unsigned mail via bluestatedigital +dscc.org require_signed "dscc.org;ptr:bluestatedigital.com"; dslgroup.com require_signed dslgroup.ccsend.com; // needs spf for some unsigned mail from their own servers ducotech.com signed_white ducotech.ccsend.com; // some unsigned mail from their own servers dullesmetro.com require_signed dullesmetro.ccsend.com; @@ -683,15 +686,17 @@ e.campingworld.com require_signed e.campingworld.com; e.campingworldrv.com require_signed e.campingworldrv.com; ecerts.americanexpress.com require_signed ecerts.americanexpress.com; +e.change.org require_signed e.change.org; e.chase.com require_signed e.chase.com; +echo.com require_signed echo.com; echosign.com require_signed echosign.com; -e.clarksusa.com signed_white "e.clarksusa.com,bounceexchange.com"; // some unsigned mail via exacttarget +e.clarksusa.com require_signed "e.clarksusa.com;ptr:clarksusa.com"; eclinicalmail.com require_signed eclinicalmail.com; eclipsegr.com require_signed eclipsegr-com.20150623.gappssmtp.com; e.colehaan.com require_signed e.colehaan.com; e.collegeboard.org require_signed e.collegeboard.org; e.columbia.com require_signed e.columbia.com; -e.comixology.com require_signed e.comixology.com; +e.comixology.com require_signed "e.comixology.com,comixology.com"; ecommail.walgreens.com require_signed ecommail.walgreens.com; economist.com require_signed economist.com; e.constantcontact.com require_signed e.constantcontact.com; @@ -799,6 +804,7 @@ email.anthem.com require_signed email.anthem.com; email.apple.com require_signed email.apple.com; email.athleta.com require_signed email.athleta.com; +email.avery.com require_signed email.avery.com; email.b0.monster.com require_signed email.b0.monster.com; email.babycenter.com require_signed email.babycenter.com; email.backcountry.com require_signed email.backcountry.com; @@ -829,6 +835,7 @@ email.cort.com require_signed email.cort.com; email.cruisecritic.com require_signed email.cruisecritic.com; email.cynopsis.com signed_white email.cynopsis.com; // some unsigned from their own servers that fails spf +email.dandb.com require_signed email.dandb.com; email.deadline.com require_signed email.deadline.com; email.digg.com require_signed email.digg.com; email.directnic.com require_signed directnic.com; @@ -931,7 +938,7 @@ email.payless.com require_signed "payless.com,email.payless.com"; email-petsmart.com require_signed email-petsmart.com; email.petvalu.com require_signed email.petvalu.com; -email-philly.com require_signed email-philly.com; +email-philly.com require_signed "email-philly.com;ptr:lstrk.net"; // broken dkim signatures via lstrk email.photo.walgreens.com require_signed email.photo.walgreens.com; email.quickenloans.com require_signed email.quickenloans.com; email.renttherunway.com require_signed email.renttherunway.com; @@ -1080,6 +1087,7 @@ e.mypublisher.com require_signed e.mypublisher.com; em.zales.com require_signed em.zales.com; e.nationalgeographic.com require_signed e.nationalgeographic.com +enertechgeo.com require_signed enertechgeo.com; e.netgear.com require_signed e.netgear.com; e.newegg.com require_signed newegg.com; enews.lenovo.com require_signed enews.lenovo.com; @@ -1181,14 +1189,14 @@ exchange.calstatela.edu require_signed csula.onmicrosoft.com; executivehospitality.com require_signed spsend.com; exhibitoronline.co require_signed exhibitoronline.co; -exlevents.com require_signed exlevents.com; +exlevents.com require_signed "exlevents.com,mktomail.com"; expediamail.com require_signed mg.expediamail.com; explore.oceaniacruises.com require_signed explore.oceaniacruises.com; explore.pinterest.com require_signed explore.pinterest.com; explore.thenorthface.com require_signed explore.thenorthface.com; expolinc.us signed_white expolinc.ccsend.com; // some unsigned mail from their outbound servers, no spf record exponation.net require_signed "exponation-net.20150623.gappssmtp.com,auth.ccsend.com,icontactmail1.com"; -exponential.com require_signed exponentialinc.onmicrosoft.com; +exponential.com require_signed "exponentialinc.onmicrosoft.com,mktomail.com"; extracare.cvs.com require_signed extracare.cvs.com; extremereach.com require_signed extremereach.com; extremerestraints.com require_signed icontactmail9.com; @@ -1211,7 +1219,7 @@ fantomdrives.com require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; farmsanctuary.org require_signed mta-bbcspool.convio.net; fashionbizinc.org require_signed fashionbizinc.ccsend.com; -fastspring.com require_signed fastspring.com; +fastspring.com require_signed "fastspring.com;include:_spf.salesforce.com"; fatherly.com require_signed fatherly-com.20150623.gappssmtp.com; fedbarlive.org signed_white "emsend.com,em.secureserver.net"; // emsend signing with domainkeys, not dkim fedex.com require_signed fedex.com; @@ -1260,14 +1268,17 @@ formdecor.com require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; fortispay.com require_signed fortispay.com; fourhourbody.com require_signed fourhourbody.com; +fox8live.com require_signed raycom.onmicrosoft.com; fox.com require_signed "foxgroupinc.onmicrosoft.com,cmail19.com,cmail20.com"; foxcreative.net signed_white emlr2.com; // some unsigned mail via ms outlook +foxnews.com require_signed foxnews.com; foxtv.com require_signed foxtv.onmicrosoft.com; frame.io require_signed "frame.io,amazonses.com"; fraudprevention.chase.com require_signed fraudprevention.chase.com; freeconference.com signed_white freeconference.com; // allow their messages to be forwarded freedomforallamericans.org require_signed bounce.bluestatedigital.com; freepik-mail.com require_signed freepik-mail.com; +freshbooks.com require_signed freshbooks.com; from.ieee.org require_signed from.ieee.org; fsshelpdesk.org require_signed news.fedhelpdesk.org; fult.com require_signed fultonbank.onmicrosoft.com; @@ -1289,7 +1300,7 @@ ges.com signed_white "ges.com,viadcorp.onmicrosoft.com"; getfpv.com require_signed getfpv.com; getjibjab.com require_signed getjibjab.com; -getty.edu require_signed gettytrust.onmicrosoft.com; +getty.edu require_signed "getty.edu,gettytrust.onmicrosoft.com"; gge4mailer.com signed_white email.gge4mailer.com; ggimageusa.com require_signed "icontact.com,icontactmail3.com,smtpserver.email,smtpsendemail.com,smtpsendmail.com,smtp.com,ggimageusa-com.20150623.gappssmtp.com"; gifts.figis.com require_signed gifts.figis.com; @@ -1322,6 +1333,8 @@ gpcc.com require_signed gpcc.com; grabcad.com require_signed grabcad.com; grandopera.org signed_white grandopera.ccsend.com; // some unsigned mail via sendlabs.com +graniteunited.com require_signed graniteunited-com.20150623.gappssmtp.com; +graphicartsassociation.org require_signed "graphicartsassociation.org;ptr:createsend.com"; graphiccommunications.us require_signed graphiccommunications.onmicrosoft.com; graphisoft.com require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; greatebay.com require_signed sendclubmail.com; @@ -1375,6 +1388,7 @@ hbanet.org require_signed hbanet.org; hbham.com signed_white hbham.com; // unsigned mail from their own mail server that fails strong spf hcconstructors.com require_signed pwcusa.ccsend.com; +hctra.org require_signed hctra.org; healthcarefinancenews.com require_signed healthcarefinancenews.com; healthcare.gov require_signed healthcare.gov; healthcareinfosecurity.com require_signed healthcareinfosecurity.com; @@ -1389,6 +1403,7 @@ hellotrade.com require_signed hellotrade.com; help.aabacosmallbusiness.com require_signed help.aabacosmallbusiness.com; helpyourtaxclients.com require_signed helpyourtaxclients.com; +hemmeconstruction.com require_signed hemmeconstruction.onmicrosoft.com; henningers.com require_signed icontactmail1.com; heritagebusiness.com signed_white "heritagebusiness.com,heritagebusiness.onmicrosoft.com,evolvedoffice.com"; // some missing dkim keys in dns hhglobal.com require_signed hhglobal.com; @@ -1400,12 +1415,12 @@ himssmedia.com require_signed himssmedia.com; hired.com require_signed hired.com; hive.com require_signed "hive.com,hive-com.20150623.gappssmtp.com"; -hmc.edu require_signed hmc2.onmicrosoft.com; +hmc.edu require_signed "hmc2.onmicrosoft.com;ptr:imodules.com"; hofstra.edu require_signed "hofstra.edu,targetx.com,hofstra1edu.onmicrosoft.com"; holosonics.com require_signed holosonics.ccsend.com; holts.com signed_white icontactmail1.com; // some unsigned mail from their own web server with no reverse dns not listed in their spf record homeaway.com require_signed homeaway.com; -homedepot.com signed_white homedepot.com; // some unsigned mail via salesforce from customer service +homedepot.com require_signed "homedepot.com;ptr:secureserver.net include:_spf.salesforce.com"; home-mail.sophos.com require_signed home.sophos.com; hometalk.com require_signed "hometalk.com,amazonses.com,icontactmail2.com"; hometalkmedia.com require_signed hometalkusa.ccsend.com; @@ -1463,6 +1478,7 @@ info6.accountonline.com require_signed info6.accountonline.com; info6.citi.com require_signed info6.citi.com; info.bitdefender.com require_signed info.bitdefender.com; +info.brother.com require_signed info.brother.com; info.cdw.com require_signed info.cdw.com; info.citibank.com require_signed "citibank.com,info.citibank.com"; info.citrixdelivers.com require_signed info.citrixdelivers.com; @@ -1540,7 +1556,7 @@ jobs.fbg.alerted.org require_signed fbg.alerted.org; jobs.mpr.alerted.org require_signed mpr.alerted.org; johnandkiras.com require_signed "johnandkiras.com,commercev3.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; -johncanningco.com require_signed spsend.com; +johncanningco.com require_signed "spsend.com,actsend.com"; johnmaxwell.com require_signed email.johnmaxwell.com; johnstonortholab.com require_signed johnstonortholab.com; joshshapiro.org signed_white bounce.bluestatedigital.com; @@ -1560,6 +1576,7 @@ kennedy-center.org require_signed kennedy-center.org; kep.com require_signed "kep.com,*.ccsend.com"; kerio.com require_signed kerio.com; +kerlanjobe.com require_signed kerlnajobeorthopaedic.onmicrosoft.com; keswicktheatre.com signed_white keswicktheatre.ccsend.com; // some unsigned mail from their own servers keystoneline.com require_signed keystoneline.ccsend.com; kftv.com require_signed kftv.com; @@ -1572,7 +1589,7 @@ knoll.com require_signed knoll.com; knotandrope.com require_signed "sendgrid.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; knowledge.onlinecompliancepanel.net require_signed knowledge.onlinecompliancepanel.net; -kofc.org signed_white www-kofc.ccsend.com; // some unsigned mail from their own mail server not listed in their spf record +kofc.org require_signed "kofc.onmicrosoft.com,www-kofc.ccsend.com"; komenphiladelphia.org require_signed komenphiladelphia.org; kovr.com signed_white cbs.onmicrosoft.com; // unsigned mail via pphosted kpbs.org require_signed "kpbs.org,spsend.com"; @@ -1595,8 +1612,9 @@ latest.newsmax.com require_signed latest.newsmax.com; latimes.com require_signed "latimes.com,nl.latimes.com"; latinworks.com require_signed latinworks.onmicrosoft.com; +laurenpennisi.com require_signed laurenpennisi-com.20150623.gappssmtp.com law360.com require_signed "law360.com,mailings-alt.law360.com"; -laweekly-insider.com require_signed laweekly-insider.com; +laweekly-insider.com require_signed "laweekly-insider.com,pmta.sailthru.com"; lawline.com require_signed "*.lawline.com,icontactmail1.com,*.hubspotemail.net"; lawreviewcle.com require_signed lawreviewcle.com; law.stanford.edu require_signed "cmail19.com,cmail20.com"; @@ -1658,9 +1676,10 @@ loweekly.com require_signed loweekly.com; loyaltyalliance.com require_signed "loyaltyalliance.com,mx-senderer-02.com,mx-senderer-03.com"; loyalty.bloomingdales.com require_signed loyalty.bloomingdales.com; -loyalty.ms.aa.com signed_white loyalty.ms.aa.com; // they send some unsigned mail +loyalty.ms.aa.com require_signed loyalty.ms.aa.com; lpl.com require_signed "lpl.com,email01.fmgsuite.com"; lqa.com require_signed cp20.com; +lrb.co.uk require_signed lrb.co.uk; l.soma.com require_signed l.soma.com; lsu.edu require_signed lsu.edu; // unsigned, but should pass strong spf ltsc.ucsb.edu require_signed ltsc.ucsb.edu; @@ -1684,6 +1703,7 @@ mail-1.bizjournals.com require_signed bizjournals.com; mail1.wellsfargo.com require_signed mail1.wellsfargo.com; mail2.gofarrewards.wellsfargo.com require_signed mail2.gofarrewards.wellsfargo.com; +mail2.henrystewartpublications.com require_signed mail2.henrystewartpublications.com; mail2.wellsfargo.com require_signed mail2.wellsfargo.com; mail3.ams-cc.com require_signed ams-cc.com; mail5.avvo.com require_signed mail5.avvo.com; @@ -1797,6 +1817,7 @@ mediabrains.com require_signed mediabrains.com; mediaexperts.com require_signed mediaexpert.onmicrosoft.com; media.ieee.org require_signed media.ieee.org; +mediaocean.com require_signed mediaocean13.onmicrosoft.com; // unsigned mail from their own servers passes strong spf mediapost.com require_signed mediapost.com; medium.com require_signed medium.com; medjet.com require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; @@ -1863,14 +1884,15 @@ minico.com require_signed criticalimpactinc.com; minime.nsta.org require_signed minime.nsta.org; minnesotavikingsemail.com require_signed minnesotavikingsemail.com; -miraclesuit.com require_signed miraclesuit.com; +miraclesuit.com require_signed "miraclesuit.com,amazonses.com"; mlb.com require_signed majorleaguebaseball.onmicrosoft.com; ml.com require_signed ct-mail.ml.com; mlivenyc.com require_signed cvent-planner.com; +mmaglobal.com require_signed mmaglobal.com; m.mail.coursera.org require_signed m.mail.coursera.org; mmsonline.com require_signed mmsonline.com; mms-updates.com require_signed mms-updates.com; -moasis.com require_signed moasis-com.20150623.gappssmtp.com; +moasis.com require_signed "moasis-com.20150623.gappssmtp.com,mailer3.zohocrm.com"; mobileair.com require_signed tiogahvac.onmicrosoft.com; mobiletechinc.com require_signed mobiletechinc.onmicrosoft.com; mobivity.com require_signed mobivity.com; @@ -1908,7 +1930,7 @@ mtb.com require_signed mtb.com; mtbopinions.com require_signed mtbopinions.com; muckfestms.com require_signed muckfestms.com; -multibriefs.com signed_white multibriefs.com; // some unsigned mail via mimecast +multibriefs.com require_signed multibriefs.com; murphy4nj.com require_signed "murphy4nj-com.20150623.gappssmtp.com,bounce.bluestatedigital.com"; murphyforflorida.com signed_white bounce.bluestatedigital.com; musicacademy.org require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; @@ -1919,7 +1941,7 @@ myamextravel.com require_signed myamextravel.com; my.ba.com require_signed my.ba.com; mybbb.org require_signed "mybbb.org,auth.ccsend.com"; -mycase.com signed_white mycase.com; // some unsigned mail from salesforce fails strong spf +mycase.com require_signed "mycase.com,mycase-com.20150623.gappssmtp.com;include:_spf.salesforce.com"; my.containerstore.com require_signed my.containerstore.com; myddi.com require_signed myddi.com; myemma.com require_signed myemma.com; @@ -2012,13 +2034,14 @@ news.united.com require_signed news.united.com; news.weddingpaperdivas.com require_signed news.weddingpaperdivas.com; news.wwgoa.com require_signed news.wwgoa.com; -newwavetech.com signed_white icontactmail3.com; // some unsigned mail directly from their servers +newwavetech.com require_signed icontactmail3.com; nexcopy.com require_signed nexcopy-com.20150623.gappssmtp.com; nextdayflyers.com require_signed nextdayflyers.com; -nfib.org require_signed nfib.org; +nfib.org require_signed "nfib.org;include:_spf.salesforce.com"; nfibweekly.bulletinmedia.com require_signed bulletinmedia.com; nice.com require_signed nice.com; nickeygregory.com require_signed nickeygregory-com.20150623.gappssmtp.com; +nielsen.com require_signed "nielsen-com.20150623.gappssmtp.com,sendgrid.net;ptr:nielsenmedia.com"; nielsen-email.com require_signed nielsen-email.com; nisolo.com require_signed nisolo.com; njbiz.com require_signed "journalpub1.onmicrosoft.com,njbiz.com"; @@ -2082,8 +2105,9 @@ officialpoc.com require_signed smtpsend.com; // sam registration stuff offset.com require_signed offset.com; ogjo-media.com require_signed ogjo-media.com; // pennwell for neal -ogunquitplayhouse.org signed_white ogunquitplayhouse.org; // password resets are unsigned from sendlabs.com not listed in spf +ogunquitplayhouse.org require_signed "ogunquitplayhouse.org;ptr:sendlabs.com ptr:wordfly.com"; okta.com require_signed okta.com; +oldies.com require_signed oldies.com; oldnavy.com require_signed oldnavy.com; olmcatholicschool.com require_signed "olmcatholicschool-com.20150623.gappssmtp.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; olmrcs.com require_signed olmrcs-com.20150623.gappssmtp.com; @@ -2139,9 +2163,10 @@ palimountain.com require_signed palimountain.onmicrosoft.com; palmislandcaribbean.com require_signed zmaildirect.com; paloma.washingtonpost.com require_signed paloma.washingtonpost.com; -pandora.com signed_white "pandora.com,sg.pandora.com"; // some unsigned mail directly from pandora mail servers +pandora.com require_signed "pandora.com,sg.pandora.com"; panerabreadnews.com require_signed panerabreadnews.com; pangeabuilders.com require_signed pangeabuilders.com; +panitchlaw.com require_signed panitchlaw.onmicrosoft.com; paperlesspost.com require_signed "paperlesspost.com,*.paperlesspost.com"; paradigmimaging.com require_signed "store.smtp.bigcommerce.net,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; parallels-universe.com require_signed parallels-universe.com; @@ -2205,6 +2230,7 @@ phillytrib.com require_signed phillytrib.com; philmontcc.org require_signed philmontcc.org; philorch.org require_signed philorch.org; +phone.com require_signed "phone.com;ptr:phone.com"; // unsigned mail, but passes strong spf photoemail.walgreens.com require_signed photoemail.walgreens.com; phs.org require_signed phs.org; physiqonomics.com require_signed "ckmail4.com,*.convertkit.com"; @@ -2359,7 +2385,7 @@ richardsolomonreplies.com require_signed richardsolomonreplies.com; richmondproductions.com signed_white richmondproductions-com.20150623.gappssmtp.com; // diane@solvang rickwarren.org require_signed bluehornet.com; -rimage.com require_signed rimagede.onmicrosoft.com; // some unsigned mail passes strong spf +rimage.com require_signed "rimagede.onmicrosoft.com,mail.wpengine.com"; // some unsigned mail passes strong spf rimsd.k12.ca.us require_signed rimoftheworldu.onmicrosoft.com; riogrande.com require_signed riogrande.com; riponprinters.com require_signed riponprinters.ccsend.com; @@ -2392,6 +2418,7 @@ saddleback.edu require_signed livesocccd.onmicrosoft.com; safehome.adt.com require_signed safehome.adt.com; safesend.com require_signed safesend.com; +safesendreturns.com require_signed safesendreturns.com; salamanderhotels.com require_signed salamanderhotels.com; salamanderresort.com require_signed "salamanderresort.com,salamanderhotels.com"; salonrunner.com require_signed salonrunner.com; @@ -2408,10 +2435,13 @@ sbgtv.com require_signed sbgtv.com; sbpub.com require_signed "publicaster.com,bsftransmit7.com"; sbs.nyc.gov require_signed "auth.ccsend.com,nycsbs.ccsend.com"; +scafidijuliano.com require_signed sjhlaw.onmicrosoft.com; sc.com require_signed sc.com; +scewebservices.com require_signed scewebservices.com; schedulepayment.com require_signed schedulepayment.com; schoology.com require_signed email.schoology.com; schoox.com require_signed mail.intercom.io; +sciquest.com require_signed sciquest.com; // unsigned mail passes strong spf scoremorerewards.com require_signed scoremorerewards.com; scotnery.com require_signed scotnery.com; scottthomasid.com require_signed scottthomasid.com; @@ -2426,6 +2456,7 @@ seatgeek.com require_signed seatgeek.com; seatme.com require_signed seatme.com; secondstreet.com require_signed secondstreet.com; +secure.com require_signed secure.com; // spf -all, no dmarc record securedata-trans.com require_signed mg.securedata-trans.com; secure.fraudarmorservice.com require_signed secure.fraudarmorservice.com; secure.norton.com require_signed secure.norton.com; @@ -2440,6 +2471,7 @@ service01.email-allstate.com require_signed service01.email-allstate.com; service.capitalone.com require_signed capitalone.com; service.checkout.visa.com require_signed service.checkout.visa.com; +service.communications.yahoo.com require_signed service.communications.yahoo.com; service.dealer-enews.com require_signed service.dealer-enews.com; service.govdelivery.com require_signed service.govdelivery.com; service.grainger.com require_signed service.grainger.com; @@ -2460,6 +2492,8 @@ sgia.org require_signed "sgia.org,*.hubspotemail.net"; shadesoflight.com require_signed shadesoflight.com; shapingahealthylife.com require_signed weebly.com; +shapiro.secureemailportal.com require_signed secureemailportal.com; +shenghuatec.com require_signed "shenghuatec.com;ptr:qq.com"; // unsigned mail, whitelisted via qq shermanstravel.com require_signed shermanstravel.com; shipstation.com require_signed shipstation.com; shipsticks.com require_signed shipsticks.com; @@ -2469,7 +2503,7 @@ shop.c21stores.com require_signed shop.c21stores.com; shopcandelabra.com require_signed shopcandelabra.ccsend.com; shopdeluxe.com require_signed deluxe.onmicrosoft.com; -shopify.com require_signed "shopify.com,zendesk.com,*.hubspot.com"; +shopify.com require_signed "shopify.com,zendesk.com,*.hubspot.com,mktdns.com"; shop.newbalance.com require_signed shop.newbalance.com; shoppermarketing.ims-stats.com require_signed shoppermarketing.ims-stats.com; shopping.hammacher.com require_signed "shopping.hammacher.com,email.triggermail.io"; @@ -2608,7 +2642,7 @@ symantec.rsys2.com require_signed rsys2.com; syncplicity.com require_signed syncplicity.com; synergem.com require_signed "synergem-com.20150623.gappssmtp.com,synergem.ccsend.com"; -synergysettlements.com require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; +synergysettlements.com require_signed "synergysettlementconsulting.onmicrosoft.com,mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; syvchorale.org require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; tabshred.com require_signed tabshred.com; talend.com require_signed talend.com; @@ -2705,6 +2739,7 @@ trade.gov require_signed trade.gov; traillink.com require_signed traillink.com; trainingmag.com require_signed "*.n-email5.net,*.n-email.net" +transactisiq.com require_signed transactisiq.com; trans.duluthtradingemail.com require_signed trans.duluthtradingemail.com; transferwise.com require_signed transferwise.com; traveloni.com require_signed "traveloni.com,traveloni.ccsend.com"; @@ -2766,7 +2801,7 @@ updates.ticketnetworkdirect.com require_signed updates.ticketnetworkdirect.com; updates.uscourts.gov require_signed updates.uscourts.gov; update.trulia.com require_signed update.trulia.com; -uphs.upenn.edu signed_white cvent-planner.com; // some unsigned mail via en25 +uphs.upenn.edu require_signed "cvent-planner.com;ptr:uphs.upenn.edu"; uportland.org require_signed uportland.org; uprinting.com require_signed uprinting.com; ups.com require_signed ups.com; @@ -2821,6 +2856,7 @@ vote-now.com require_signed vote-now.com; voxmedia.com require_signed voxmedia.com; vsimedia.com require_signed vsimedia.onmicrosoft.com; +vsp.com require_signed visionserviceplan.onmicrosoft.com; vt.edu signed_white bsf01.com; // probably other sources also vyesports.com require_signed vyesports-com.20150623.gappssmtp.com walmart.com require_signed walmart.com; @@ -2836,6 +2872,7 @@ waterboards.ca.gov require_signed cawaterboards.onmicrosoft.com; wayfair.com require_signed "wayfair.com,wayfair.onmicrosoft.com"; wayneart.org require_signed "mandrillapp.com,mailchimpapp.net,*.mcsignup.com,*.mcsv.net,*.rsgsv.net,*.mcdlv.net"; +wcasd.k12.pa.us require_signed wcasd.k12.pa.us; wdsearch.com require_signed wdsearch.com; wdw.disneyonline.com require_signed disneyonline.com; wealthyretirement.com require_signed wealthyretirement.com; @@ -2912,6 +2949,7 @@ ymca-snoco.org require_signed ymcasnoco.onmicrosoft.com; y.mileskimball.com require_signed y.mileskimball.com; youcaring.com require_signed youcaring.com; +youmake.wetransfer.com require_signed youmake.wetransfer.com; youngliving.com require_signed youngliving.com; youniqueproducts.com require_signed youniqueproducts.com; youraccount.readyrefresh.com require_signed youraccount.readyrefresh.com; diff -r 79e944269c0b -r 8ad675a5d448 tld.conf --- a/tld.conf Thu Apr 25 09:35:53 2019 -0700 +++ b/tld.conf Thu Apr 25 09:47:36 2019 -0700 @@ -1,4 +1,4 @@ -// generated by make-tld-conf.py on 2019-03-09 18:21:18 +// generated by make-tld-conf.py on 2019-04-25 09:36:34 // This Source Code Form is subject to the terms of the Mozilla Public // License, v. 2.0. If a copy of the MPL was not distributed with this @@ -157,8 +157,13 @@ net.al org.al -// am : https://en.wikipedia.org/wiki/.am +// am : https://www.amnic.net/policy/en/Policy_EN.pdf am +co.am +com.am +commune.am +net.am +org.am // ao : https://en.wikipedia.org/wiki/.ao // http://www.dns.ao/REGISTR.DOC @@ -990,17 +995,16 @@ fo // fr : http://www.afnic.fr/ -// domaines descriptifs : http://www.afnic.fr/obtenir/chartes/nommage-fr/annexe-descriptifs +// domaines descriptifs : https://www.afnic.fr/medias/documents/Cadre_legal/Afnic_Naming_Policy_12122016_VEN.pdf fr +asso.fr com.fr -asso.fr +gouv.fr nom.fr prd.fr -presse.fr tm.fr -// domaines sectoriels : http://www.afnic.fr/obtenir/chartes/nommage-fr/annexe-sectoriels +// domaines sectoriels : https://www.afnic.fr/en/products-and-services/the-fr-tld/sector-based-fr-domains-4.html aeroport.fr -assedic.fr avocat.fr avoues.fr cci.fr @@ -1008,7 +1012,6 @@ chirurgiens-dentistes.fr experts-comptables.fr geometre-expert.fr -gouv.fr greta.fr huissier-justice.fr medecin.fr @@ -6457,31 +6460,31 @@ edu.to mil.to -// subTLDs: https://www.nic.tr/forms/eng/policies.pdf -// and: https://www.nic.tr/forms/politikalar.pdf -// Submitted by +// tr : https://nic.tr/ +// https://nic.tr/forms/eng/policies.pdf +// https://nic.tr/index.php?USRACTN=PRICELST tr +av.tr +bbs.tr +bel.tr +biz.tr com.tr +dr.tr +edu.tr +gen.tr +gov.tr info.tr -biz.tr +mil.tr +k12.tr +kep.tr +name.tr net.tr org.tr -web.tr -gen.tr -tv.tr -av.tr -dr.tr -bbs.tr -name.tr +pol.tr tel.tr -gov.tr -bel.tr -pol.tr -mil.tr -k12.tr -edu.tr -kep.tr - +tsk.tr +tv.tr +web.tr // Used by Northern Cyprus nc.tr @@ -7459,9 +7462,6 @@ // aco : 2015-01-08 ACO Severin Ahlmann GmbH & Co. KG aco -// active : 2014-05-01 Active Network, LLC -// no ns record for active - // actor : 2013-12-12 United TLD Holdco Ltd. actor @@ -8296,9 +8296,6 @@ // dog : 2014-12-04 Binky Moon, LLC dog -// doha : 2014-09-18 Communications Regulatory Authority (CRA) -doha - // domains : 2013-10-17 Binky Moon, LLC domains @@ -11278,6 +11275,7 @@ // Automattic Inc. : https://automattic.com/ // Submitted by Alex Concha go-vip.co +go-vip.net wpcomstaging.com // AVM : https://avm.de @@ -11293,6 +11291,10 @@ // Submitted by Anthony Voutas backplaneapp.io +// Banzai Cloud +// Submitted by Gabor Kozma +app.banzaicloud.io + // BetaInABox // Submitted by Adrian betainabox.com @@ -11328,6 +11330,7 @@ // Bytemark Hosting : https://www.bytemark.co.uk // Submitted by Paul Cammish +uk0.bigv.io dh.bytemark.co.uk vm.bytemark.co.uk @@ -11396,6 +11399,10 @@ // Submitted by Alex Stoddard xenapponazure.com +// Civilized Discourse Construction Kit, Inc. : https://www.discourse.org/ +// Submitted by Rishabh Nambiar +discourse.group + // ClearVox : http://www.clearvox.nl/ // Submitted by Leon Rowland virtueeldomein.nl @@ -11422,6 +11429,10 @@ cloudcontrolled.com cloudcontrolapp.com +// Cloudflare, Inc. : https://www.cloudflare.com/ +// Submitted by Jake Riesterer +workers.dev + // co.ca : http://registry.co.ca/ co.ca @@ -12162,6 +12173,11 @@ // Submitted by Alex Hanselka gitlab.io +// GOV.UK Platform as a Service : https://www.cloud.service.gov.uk/ +// Submitted by Tom Whitwell +cloudapps.digital +london.cloudapps.digital + // UKHomeOffice : https://www.gov.uk/government/organisations/home-office // Submitted by Jon Shanks homeoffice.gov.uk @@ -12529,6 +12545,10 @@ org.ru pp.ru +// Nabu Casa : https://www.nabucasa.com +// Submitted by Paulus Schoutsen +ui.nabu.casa + // Netlify : https://www.netlify.com // Submitted by Jessica Parsons bitballoon.com @@ -12858,6 +12878,11 @@ rackmaze.com rackmaze.net +// Rancher Labs, Inc : https://rancher.com +// Submitted by Vincent Fiduccia +*.on-rancher.cloud +*.on-rio.io + // Read The Docs, Inc : https://www.readthedocs.org // Submitted by David Fischer readthedocs.io @@ -12881,6 +12906,10 @@ ptplus.fit wellbeingzone.co.uk +// Rochester Institute of Technology : http://www.rit.edu/ +// Submitted by Jennifer Herting +git-pages.rit.edu + // Sandstorm Development Group, Inc. : https://sandcats.io/ // Submitted by Asheesh Laroia sandcats.io @@ -12988,6 +13017,10 @@ applicationcloud.io scapp.io +// Syncloud : https://syncloud.org +// Submitted by Boris Rybalkin +syncloud.it + // Synology, Inc. : https://www.synology.com/ // Submitted by Rony Weng diskstation.me @@ -13185,6 +13218,10 @@ // Submitted by Martin Angelov bss.design +// Zitcom A/S : https://www.zitcom.dk +// Submitted by Emil Stahl +site.builder.nu + // Zone.id : https://zone.id/ // Submitted by Su Hendro zone.id