My company, which sends @example.co email from Google Workspace, HubSpot, and Salesforce, has the following SPF record in DNS:
v=spf1 include:_spf.google.com include:_spf.salesforce.com
include:xxxxxxxx.xxxxx.hubspotemail.net ~all
We also have three websites which send emails from @example.co addresses (e.g. Forget Password-type emails):
www.example.co (hosted by WP Engine / CNAME record in DNS)
subdomain.example.co (hosted at AWS, no SES / A record in DNS)
microsite.com (hosted at AWS, no SES / separate DNS)
As far as I know, there are no emails sent as @subdomain.example.co or @microsite.com.
How do I go about adding these websites to the SPF statement? What is the syntax? Would it be website URL/IPs?
And do I need to add anything to my DMARC record or add DKIM for the above?
Any help would be really appreciated!