{
  "as_of": "2026-10-08",
  "method": "Each include was resolved with MailSetupCheck's SPF expander (engine/tools/email-auth-check/core.js) over Cloudflare DNS-over-HTTPS, counting include, a, mx, ptr, exists and redirect terms the way RFC 7208 section 4.6.4 does. cost_in_your_record = 1 (the include itself) + nested_lookups. Vendors change these records without notice; re-run data/mail/measure_spf_includes.mjs.",
  "includes": [
    {
      "include": "_spf.google.com",
      "service": "Google Workspace",
      "docs": "https://knowledge.workspace.google.com/admin/security/set-up-spf",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all"
    },
    {
      "include": "spf.protection.outlook.com",
      "service": "Microsoft 365",
      "docs": "https://learn.microsoft.com/en-us/defender-office-365/email-authentication-spf-configure",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all"
    },
    {
      "include": "zohomail.com",
      "service": "Zoho Mail",
      "docs": "https://www.zoho.com/mail/help/adminconsole/spf-configuration.html",
      "status": "ok",
      "nested_lookups": 1,
      "cost_in_your_record": 2,
      "void_lookups": 0,
      "record": "v=spf1 include:spf.zohomail.com -all"
    },
    {
      "include": "spf.messagingengine.com",
      "service": "Fastmail",
      "docs": "https://www.fastmail.help/hc/en-us/articles/360060591153-Manual-DNS-configuration",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ip4:103.168.172.128/27 ip4:202.12.124.128/27 ip4:204.75.18.128/27 -all"
    },
    {
      "include": "_spf.protonmail.ch",
      "service": "Proton Mail",
      "docs": "https://proton.me/support/anti-spoofing-custom-domain",
      "status": "ok",
      "nested_lookups": 1,
      "cost_in_your_record": 2,
      "void_lookups": 0,
      "record": "v=spf1 ip4:185.70.40.0/24 ip4:185.70.41.0/24 ip4:185.70.43.0/24 ip4:79.135.106.0/24 ip4:79.135.107.0/24 ip4:109.224.244.0/24 include:_spf2.protonmail.ch ~all"
    },
    {
      "include": "icloud.com",
      "service": "iCloud+ custom domains",
      "docs": "https://support.apple.com/en-us/102374",
      "status": "ok",
      "nested_lookups": 4,
      "cost_in_your_record": 5,
      "void_lookups": 0,
      "record": "v=spf1 redirect=_spf.icloud.com"
    },
    {
      "include": "sendgrid.net",
      "service": "SendGrid",
      "status": "ok",
      "nested_lookups": 1,
      "cost_in_your_record": 2,
      "void_lookups": 0,
      "record": "v=spf1 ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 ip4:159.183.0.0/16 ip4:134.128.64.0/18 ip4:159.26.176.0/20 include:ab.sendgrid.net ~all"
    },
    {
      "include": "mailgun.org",
      "service": "Mailgun",
      "status": "ok",
      "nested_lookups": 4,
      "cost_in_your_record": 5,
      "void_lookups": 0,
      "record": "v=spf1 include:_spf.mailgun.org include:_spf.eu.mailgun.org -all"
    },
    {
      "include": "amazonses.com",
      "service": "Amazon SES (custom MAIL FROM)",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169.224.0/20 ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20 ip4:54.240.64.0/18 ip4:76.223.128.0/19 ip4:216.221.160.0/19 ip4:206.55.144.0/20 ip4:24.110.64.0/18 ip4:98.77.0.0/16 -all"
    },
    {
      "include": "spf.mailjet.com",
      "service": "Mailjet",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:45.14.148.0/22 ~all"
    },
    {
      "include": "spf.mtasv.net",
      "service": "Postmark",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ip4:50.31.156.96/27 ip4:104.245.209.192/26 ip4:50.31.205.0/24 ip4:147.160.158.0/24 -all"
    },
    {
      "include": "servers.mcsv.net",
      "service": "Mailchimp (older setups)",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 -all"
    },
    {
      "include": "spf.mandrillapp.com",
      "service": "Mailchimp Transactional (Mandrill)",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ip4:198.2.128.0/24 ip4:198.2.132.0/22 ip4:198.2.136.0/23 ip4:198.2.145.0/24 ip4:198.2.186.0/23 ip4:205.201.131.0/24 ip4:205.201.134.128/25 ip4:205.201.136.0/23 ip4:205.201.139.0/24 ip4:198.2.177.0/24 ip4:198.2.178.0/23 ip4:198.2.180.0/24 ~all"
    },
    {
      "include": "_spf.salesforce.com",
      "service": "Salesforce",
      "status": "ok",
      "nested_lookups": 1,
      "cost_in_your_record": 2,
      "void_lookups": 0,
      "record": "v=spf1 exists:%{i}._spf.mta.salesforce.com -all"
    },
    {
      "include": "mail.zendesk.com",
      "service": "Zendesk",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ip4:103.151.192.0/23 ip4:185.12.80.0/22 ip4:188.172.128.0/20 ip4:192.161.144.0/20 ip4:216.198.0.0/18 ~all"
    },
    {
      "include": "helpscoutemail.com",
      "service": "Help Scout",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ip4:54.173.229.38 ip4:52.0.20.102 ip4:54.174.116.32 ip4:52.2.238.96 ip4:52.20.146.34 ip4:34.198.122.65 ~all"
    },
    {
      "include": "email.freshdesk.com",
      "service": "Freshdesk",
      "status": "ok",
      "nested_lookups": 6,
      "cost_in_your_record": 7,
      "void_lookups": 0,
      "record": "v=spf1 include:sendgrid.net include:fdspfus.freshemail.io include:fdspfeuc.freshemail.io include:fdspfind.freshemail.io include:fdspfaus.freshemail.io ~all"
    },
    {
      "include": "shops.shopify.com",
      "service": "Shopify",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ~all"
    },
    {
      "include": "_spf.createsend.com",
      "service": "Campaign Monitor",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ip4:103.28.42.0/24 ip4:146.88.28.0/24 ip4:163.47.180.0/22 ip4:203.55.21.0/24 ip4:204.75.142.0/24 ip4:27.126.146.0/24 ~all"
    },
    {
      "include": "mktomail.com",
      "service": "Marketo",
      "status": "ok",
      "nested_lookups": 0,
      "cost_in_your_record": 1,
      "void_lookups": 0,
      "record": "v=spf1 ip4:199.15.212.0/22 ip4:72.3.185.0/24 ip4:72.32.154.0/24 ip4:72.32.217.0/24 ip4:72.32.243.0/24 ip4:94.236.119.0/26 ip4:37.188.97.188/32 ip4:185.28.196.0/22 ip4:192.28.128.0/18 ip4:103.237.104.0/22 ip4:130.248.172.0/24 ip4:130.248.173.0/24 ~all"
    }
  ]
}