DNS Report for energy.gov

• fulcrum.doe.gov

  • IPv4: 205.254.144.110
  • IPv6: 2607:f368:1000:1100::53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• foxbat.doe.gov

  • IPv4: 205.254.143.110
  • IPv6: 2607:f368:1000:1000::53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• adns1.es.net

  • IPv4: 192.188.22.22
  • IPv6: 2001:400:ffff:ffff:ffff::4444
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• adns2.es.net

  • IPv4: 192.188.22.52
  • IPv6: 2001:400:ffff:ffff:ffff::8052
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• fulcrum.doe.gov

  • Status: Responded
  • IP(s): 205.254.131.65
  • TTL: 60 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• foxbat.doe.gov

  • Status: Responded
  • IP(s): 205.254.131.65
  • TTL: 60 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• adns1.es.net

  • Status: Responded
  • IP(s): 205.254.131.65
  • TTL: 60 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• adns2.es.net

  • Status: Responded
  • IP(s): 205.254.131.65
  • TTL: 60 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

fulcrum.doe.gov

• Serial: 2024082102
• Refresh: 7200
• Retry: 3600
• Expire: 2419200
• Minimum TTL: 43200

foxbat.doe.gov

• Serial: 2024082102
• Refresh: 7200
• Retry: 3600
• Expire: 2419200
• Minimum TTL: 43200

adns1.es.net

• Serial: 2024082102
• Refresh: 7200
• Retry: 3600
• Expire: 2419200
• Minimum TTL: 43200

adns2.es.net

• Serial: 2024082102
• Refresh: 7200
• Retry: 3600
• Expire: 2419200
• Minimum TTL: 43200

Serial: 2024082102 - OK

REFRESH: 7200 - OK

RETRY: 3600 - OK

EXPIRE: 2419200 - OK

MINIMUM TTL: 43200 - Note: Outside recommended range (1-3 hours)

fulcrum.doe.gov

• 10 mxa-002bc302.gslb.gpphosted.com ( 67.231.147.102 )
• 10 mxb-002bc302.gslb.gpphosted.com ( 67.231.147.102 )

foxbat.doe.gov

• 10 mxa-002bc302.gslb.gpphosted.com ( 67.231.147.102 )
• 10 mxb-002bc302.gslb.gpphosted.com ( 67.231.155.102 )

adns1.es.net

• 10 mxa-002bc302.gslb.gpphosted.com ( 67.231.147.102 )
• 10 mxb-002bc302.gslb.gpphosted.com ( 67.231.147.102 )

adns2.es.net

• 10 mxa-002bc302.gslb.gpphosted.com ( 67.231.147.102 )
• 10 mxb-002bc302.gslb.gpphosted.com ( 67.231.155.102 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 102.147.231.67.in-addr.arpa -> mx0e-002bc302.gpphosted.com
• 102.147.231.67.in-addr.arpa -> mx0e-002bc302.gpphosted.com
• 102.155.231.67.in-addr.arpa -> mx0f-002bc302.gpphosted.com

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 3
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:_spf.doe.gov -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: _spf.doe.gov
• DNS Lookups: 2
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCjBZ0VmckwqvCxVLAcLh1dVKv2HWITRNphjIDC2CPLAKF8rXINfZb2ebQKCFrXy9F5YDW1j48D+jlQGgxq6MFR3EcoyHQM6jjQ33sKmNEfEUZecb3vY3w2spsPOJwdE0rl1roVbnqurrs3T1xVHwc7RrSZG1RCBxYpLq135xhAqQIDAQAB; n=1024,1456444314,1
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; sp=reject; fo=1; pct=100; adkim=r; aspf=r; rf=afrf; ri=86400; rua=mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected],mailto:[email protected]
• Syntax: Valid
• Policy: reject
• Subdomain Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected], mailto:[email protected]
• Failure Options (fo): 1
• DKIM Alignment (adkim): Relaxed
• SPF Alignment (aspf): Relaxed
• Reporting Interval: 86400 seconds

DMARC External Validation:

• Valid external domains: dmarc.cyber.dhs.gov, hq.doe.gov, dmarc.cyber.dhs.gov, hq.doe.gov
• All external domains in your DMARC record are giving permission to send them DMARC reports.