It can be anything! An apex, subdomain, or even a URL.

Results formail.moneyforward.com

Resolver

Location

TXT

Name	TTL	Value
mail.moneyforward.com	300	v=spf1 +ip4:133.242.168.207 +ip4:133.242.168.147 +ip4:133.242.147.225 +ip4:157.7.139.45 +ip4:157.7.141.180 +ip4:133.242.168.19 +ip4:133.242.140.182 +ip4:133.242.147.237 +ip4:157.7.139.44 +ip4:157.7.139.43 +ip4:157.7.141.181 +ip4:133.242.142.189 +ip4:157.7.141.182 +ip4:203.189.97.24 ~all