include:cust-spf.exacttarget.com – Salesforce Marketing Cloud
Short answer: include:cust-spf.exacttarget.com lets Salesforce Marketing Cloud's mail servers pass SPF for your domain. It costs 1 of the 10 DNS lookups SPF allows (checked live).
| Service | Salesforce Marketing Cloud |
|---|---|
| Lookups | 1 of the 10 DNS lookups SPF allows (checked live) |
| Record now | v=spf1 ip4:64.132.92.0/24 ip4:64.132.88.0/23 ip4:66.231.80.0/20 ip4:68.232.192.0/20 ip4:199.122.120.0/21 ip4:207.67.38.0/24 ip4:128.17.0.0/20 ip4:128.17.64.0/20 ip4:128.17.128.0/20 ip4:128.17.192.0/20 ip4:128.245.0.0/20 ip4:128.245.64.0/20 ip4:13.111.191.0/24 ip4:128.245.242.0/24 ip4:128.245.243.0/24 ip4:128.245.244.0/24 ip4:128.245.245.0/24 ip4:128.245.246.0/24 ip4:128.245.247.0/24 ip4:128.245.176.0/20 ip4:136.147.224.0/20 ip4:207.67.98.192/27 ip4:207.250.68.0/24 ip4:209.43.22.0/28 ip4:198.245.80.0/20 ip4:136.147.128.0/20 ip4:136.147.176.0/20 ip4:13.111.0.0/16 ip4:161.71.32.0/19 ip4:161.71.64.0/20 ip4:13.110.208.0/21 ip4:13.110.216.0/22 ip4:13.108.16.0/20 ip4:136.146.128.0/20 ip4:129.77.16.0/20 ip4:13.110.224.0/20 ip4:159.92.157.0/24 ip4:159.92.158.0/24 ip4:159.92.159.0/24 ip4:159.92.160.0/24 ip4:159.92.161.0/24 ip4:159.92.162.0/24 ip4:159.92.154.0/24 ip4:128.245.240.0/24 ip4:128.245.241.0/24 ip4:159.92.155.0/24 ip4:159.92.163.0/24 ip4:159.92.164.0/22 ip4:159.92.168.0/21 ip4:128.245.248.0/21 -all |
Do you need it?
Only if Salesforce Marketing Cloud sends mail with your domain in the envelope sender (Return-Path). Many services use their own bounce domain, and then this include does nothing for SPF or DMARC – DKIM does the work. Send a test email through Salesforce Marketing Cloud to see which domain SPF is checked for.
Who uses it
In our scan of top websites on 23 Oct 2026:
- 16 of the 2,214 world's top-3,000 sites that publish SPF (0.7%)
- 1 of the 1,961 India's top-3,000 sites that publish SPF (0.1%)
- 0 of the 428 Indian government sites that publish SPF (0.0%)
Add it the right way
- Keep one SPF record per domain:
v=spf1 include:cust-spf.exacttarget.com ~all, plus your other senders in the same record – SPF generator. - Stay under 10 lookups in total; every include counts, nested ones too.
- SPF alone isn't enough for Gmail, Yahoo and Outlook: turn on DKIM and publish DMARC.
Check your domain
After the fix, send a test email to see SPF, DKIM and DMARC pass on a real message, then keep an eye on it: free DMARC monitoring shows every service that sends mail as your domain and which ones fail, in plain English.
Get it fixed on Fiverr
Prefer to do it yourself? Get the step-by-step Fix Kit ($15) – 28-page guide, checklist, 20+ providers.