Unmatched SPF includes top 100

According to Live Direct Marketing's daily Tranco top-1M scan (September 24, 2026), these are the 100 most frequent SPF include: domains that our dictionary does not yet attribute to a named ESP or SaaS sender. Each represents sending infrastructure — often a niche ESP, a hosting provider or a regional platform — worth identifying.

Key facts

Just as unmatched MX targets mark the frontier of mailbox-provider detection, unmatched SPF includes mark the frontier of sender detection. An include: domain is unmatched when many domains authorize it to send mail but it maps to no known ESP or SaaS platform — typically a niche ESP, a hosting provider's mail relay, or a regional sending service.

Each unmatched include is a piece of real sending infrastructure operating at scale but flying under the radar. Publishing the top of the list is how that infrastructure gets named, and how the ESP and SaaS-sender rankings get more complete over time.

The top 100

#SPF includeDomains
1_spf.abcp.ru171
2_spf.cv-library.co.uk157
3_spf1-aws.recop.jp157
4_spf.mail-neoserv.si152
5yunyou.top141
6_spf.lh.pl140
7spf.mailii.org123
8_spf.edhost.eu122
9spf.mailcamp.nl118
10spf.pitcom.net113
11spf.w4ymail.at111
12spf.host-ww.net110
13_spf.exsilia.net109
14spf.cesky-hosting.cz107
15spf.spcloud.jp107
16_spf.armada.it106
17spf.emailfilter.io106
18spf.boldem.cz106
19spf-2248456.jmsend.com104
20spf.betrend.com104
21_spf.wpopt.net104
22smtp-cluster.plusvps.com104
23relay.guzelhosting.com102
24mfg.siteprotect.com100
25_spf.yourfilter.nl100
26_spf.sendnode.com99
27mlrcloud.com99
28spf.satorimail.net98
29spf.host.it98
30_spf.academicworks.com98
31spf.symplicity.com97
32_pmta2.antevenio.com97
33spf.protection.outlook97
34mailing.eqs.com97
35amazon.com97
36_spf.localservices.com.br97
37spf.form.run96
38_spf.presscloud.com96
39spf.aams4.jp96
40mailii.org96
41spf.v6send.net96
42_spf.tld-mx.com95
43spf.mijndomeinhosting.nl95
44_spf.octadesk.com95
45fmx.etius.jp95
46verifymyfafsa.com94
47mailmailmail.net93
48spf.esvacloud.com93
49spf.postbox.yandexcloud.net93
50relay.thundermail.uk93
51spf.protect.kvnbw.de92
52spf.qboxmail.com92
53_spf.aid.no92
54spf.ssmx.net91
55send.k-crm.jp91
56spf-us.appmail.granicusgovaccess.net91
57_spf.sent2email.com91
58ofsys.com90
59_spf.simpleviewinc.com90
60_spf.goskope.com89
61_spf01.mykronos.com89
62spf.qb-feedback.com88
63limajo.witglobal.net88
64spf.w2solution.com88
65relay.email-cluster.com88
66_spf.eemsg.mail.mil88
67_spf.shared-server.net88
68spf.rpost.net87
69sender.zcsend.jp87
70woexchange.com87
71eversrv.com86
72spf.redpoints.com86
73spf.shopserve.jp86
74spf2.nlk2.smtps.jp86
75spf.sosafe.de85
76_spf.herodesk-mails.io85
77spf.gansend.com85
78spf.chinaemail.cn85
79spfref.jackhenry.com84
80_spf.newsautodoc.com83
81spf.zoner.fi83
82custmail.vdata.com83
83dospf.simplepart.com83
84spf82
85ciphr247.com82
86_spf.zorgmail.nl82
87_spf-c.arukereso.hu82
88email.nimbleams.com81
89spf.263xmail.com81
90spfv.global-mail.cn81
91senders.mailmasterplus.net81
92spf.sabre.com80
93universalspf.org80
94x.universalspf.org80
95eur.pb-dynmktge.com80
96no-ip.com80
97spf.filteredmx.net80
98mail.imismailcenter.com80
99spf.hostido.pl79
100gateways.firstdata.com79

Provider-sized clusters to investigate next

Related hostnames are grouped by registrable base domain so one confirmed provider rule can explain several targets at once. Ranked by total occurrences in this snapshot.

Base domainOccurrencesTargetsLargest target
dnssmarthost.net2,9032,898spf.auto.dnssmarthost.net
easydmarc.pro1,6601,656_spf.personio_com._d.easydmarc.pro
ondmarc.com1,5561,551_u.abbvie.com._spf.smart.ondmarc.com
powerspf.com918913eqpmb16lwk.powerspf.com
mim.ec857839347dnym2._spf._d.mim.ec
hypernode.io789653spf.obelinklive.hypernode.io
sdmarc.net784782_sy6er676f.sdmarc.net
maildealer.jp770381spf.maildealer.jp
spf-report.com730730richmond.ca.hosted.spf-report.com
autospf.email638615_s00285110.autospf.email
cuenote.jp470284spf.newsmart.cuenote.jp
superhosting.bg430174nitro.spf.superhosting.bg
ppspf.net369314627429c3.ppspf.net
sureserver.com339234s810.smtp-spf.sureserver.com
vali.email335329sendgrid.com._nspf.vali.email
checkpoint-spf.com3263262xct79t1d.spf.checkpoint-spf.com
smtp25.com326303rdicorp-com.spf.smtp25.com
smtps.jp272101spf2.nlk2.smtps.jp
gca.to244235deae274b6e2d6bd4d2afe7a75212ea43.gca.to
mailii.org2396spf.mailii.org

Download the full candidate queue →

Why unclassified senders are worth naming

An unnamed sender is a blind spot in two directions: the industry cannot measure its reach, and domain owners authorizing it may not realize what it is. Identifying these includes turns a raw SPF token into a known platform — useful for market analysis and for anyone auditing which third parties can send under their domain.

Are your emails landing in spam?
Run a free inbox-placement test across Gmail, Outlook, Yahoo and more — see exactly where your mail lands and why.
Test inbox placement →

Frequently asked questions

What is an unmatched SPF include domain?

It is a SPF include domain that appears frequently in the Tranco top-1M but is not yet mapped to a named provider in our classification dictionary, as of September 24, 2026.

How often does this list update?

It is recomputed with every daily scan and shrinks as the classification dictionary is extended.