Norton uses Salesforce MC as their primary email service provider. They rank #2,138 in the Tranco list of most-popular domains. Their email authentication setup is solid (score 95/100).
Authentication signals observed in this brand's emails. SPF, DKIM and DMARC are the standard sender-authentication stack — see the DMARC policy below for whether spoofing is actually blocked or just monitored. One-click unsubscribe meets Google & Yahoo's bulk-sender requirements.
DMARC reports sent to vali.email. Policy
p=quarantine means receivers actively block or quarantine spoofed mail.
SPF alignment: all 4 observed emails use a return-path aligned with norton.com (bounce.emails.norton.com). SPF authenticates the visible From — supports DMARC directly.
DKIM alignment: all 4 observed emails sign with a domain aligned with norton.com (emails.norton.com). DKIM authenticates the visible From — supports DMARC directly.
VMC issued by: digicert.
Brands often use multiple ESPs (e.g. one for marketing, another for transactional/notifications).
None — only the primary ESP(s) shown aboveESPs we've seen sending email for this brand. Green = confirmed by SPF, sender IP rDNS, or known infra pairing (label shows the source). Grey = observed but not yet confirmed by SPF or PTR.
No additional ESPs authorized in the brand's SPF beyond the confirmed senders above.
Probed: norton.com, bounce.emails.norton.com, emails.norton.com
Folder distribution across all emails from this brand observed in Gmail inboxes. High inbox % = good deliverability; spam appearances are the headline signal.
| Folder | Count | Share |
|---|---|---|
| inbox | 3 | 75.0% |
| promotions | 1 | 25.0% |
Which ESP's emails are landing where. Sorted by spam % so problem senders surface first. Brands using one ESP for marketing and another for transactional often see very different placement profiles per ESP. Per-ESP folder data only started being captured recently — counts here may be smaller than the total above until backfill catches up.
| ESP | Emails | Placement | Inbox % | Tabs % | Spam % |
|---|---|---|---|---|---|
| Salesforce MC | 4 | 75.0% | 25.0% | 0.0% |
Daily observations per ESP. Brands often run multiple ESPs concurrently — marketing on one, transactional on another — so this chart shows usage rather than switches.
IP addresses norton.com has been observed sending from, and where their mail landed in Gmail.
| IP | Hostname | Obs | Reputation |
|---|---|---|---|
| 128.17.192.234 | mta3.emails.norton.com |
3 | Check → |
| 128.17.192.223 | mta.emails.norton.com |
1 | Check → |
Per-IP inbox / promotions / spam is being collected and will appear here as new emails are observed.
| Domain | ESPs detected | Delivery (7d) |
|---|---|---|
emails.norton.com | Salesforce MC 4 |