InboxAudit

npr.org email records

What npr.org publishes in public DNS for SPF, DKIM, DMARC, MX and BIMI, resolved on 2026-08-04.

SPF

v=spf1 include:spf-0032f701.pphosted.com include:spf.protection.outlook.com include:prss.org exists:%{i}._spf.mta.salesforce.com include:c9eb27a2d7.berenice.eoidentity.com ip4:64.124.132.59/32 ip4:66.150.167.192/27 ip4:162.242.229.170 ip4:205.153.38.0/24 ip4:205.153.36.170 ip4:40.107.0.0/16 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 ip4:139.60.0.0/24 ip4:139.60.1.0/24 ip4:139.60.2.0/24 ip4:139.60.3.0/24 ip4:13.111.0.0/16 ip4:136.147.135.0/24 ip4:136.147.176.0/24 ip4:136.147.182.0/24 ip4:198.245.81.0/24 ip4:199.122.123.0/24 ip4:195.66.99.135 ip4:212.227.89.57 ip4:217.160.226.166 ip4:54.194.192.132 ip4:62.75.247.44 ip4:82.165.193.1 ip4:85.25.144.9 ip4:87.79.30.25 ip4:87.79.30.30 ip4:208.86.168.7 ip4:135.84.68.123 ip4:206.152.14.54 ip4:54.240.43.16 include:_spf.salesforce.com ip4:209.144.103.186 include:spf.mandrillapp.com -all
9 of 10 DNS lookups — close to the limit.

The record authorises these sending platforms: Microsoft 365, Salesforce (Sales & Service Cloud), Mailchimp Transactional (Mandrill).

DMARC

v=DMARC1; p=reject; adkim=r; aspf=r; pct=100; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc@npr.org;
policy
p=reject
applies to
100% of mail
reports
mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc@npr.org
alignment
adkim=r, aspf=r

DKIM

Keys found on 3 of 10 probed selectors:

selector1s1mandrill

MX

mxa-0032f701.gslb.pphosted.commxb-0032f701.gslb.pphosted.com

Notes on this configuration

SPF uses 9 of the 10 permitted DNS lookups.
include:c9eb27a2d7.berenice.eoidentity.com has no SPF record (void lookup)

Check it live

The above is a snapshot from 2026-08-04. Re-resolve it now: