DNS Report for fbi.gov

• ns-cloud-e1.googledomains.com

  • IPv4: 216.239.32.110
  • IPv6: 2001:4860:4802:32::6e
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-e3.googledomains.com

  • IPv4: 216.239.36.110
  • IPv6: 2001:4860:4802:36::6e
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-e2.googledomains.com

  • IPv4: 216.239.34.110
  • IPv6: 2001:4860:4802:34::6e
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-e4.googledomains.com

  • IPv4: 216.239.38.110
  • IPv6: 2001:4860:4802:38::6e
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns-cloud-e1.googledomains.com

  • Status: Responded
  • IP(s): 104.16.149.244, 104.16.148.244
  • TTL: 120 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-cloud-e3.googledomains.com

  • Status: Responded
  • IP(s): 104.16.148.244, 104.16.149.244
  • TTL: 120 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-cloud-e2.googledomains.com

  • Status: Responded
  • IP(s): 104.16.148.244, 104.16.149.244
  • TTL: 120 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-cloud-e4.googledomains.com

  • Status: Responded
  • IP(s): 104.16.148.244, 104.16.149.244
  • TTL: 120 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns-cloud-e1.googledomains.com

• Serial: 1415240977
• Refresh: 600
• Retry: 1800
• Expire: 1209600
• Minimum TTL: 1800

ns-cloud-e3.googledomains.com

• Serial: 1415240977
• Refresh: 600
• Retry: 1800
• Expire: 1209600
• Minimum TTL: 1800

ns-cloud-e2.googledomains.com

• Serial: 1415240977
• Refresh: 600
• Retry: 1800
• Expire: 1209600
• Minimum TTL: 1800

ns-cloud-e4.googledomains.com

• Serial: 1415240977
• Refresh: 600
• Retry: 1800
• Expire: 1209600
• Minimum TTL: 1800

Serial: 1415240977 - OK

REFRESH: 600 - OK

RETRY: 1800 - OK

EXPIRE: 1209600 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

ns-cloud-e1.googledomains.com

• 10 mx-east.fbi.gov ( 153.31.119.142 )
• 20 mx-west.fbi.gov ( 153.31.192.142 )

ns-cloud-e3.googledomains.com

• 10 mx-east.fbi.gov ( 153.31.119.142 )
• 20 mx-west.fbi.gov ( 153.31.192.142 )

ns-cloud-e2.googledomains.com

• 10 mx-east.fbi.gov ( 153.31.119.142 )
• 20 mx-west.fbi.gov ( 153.31.192.142 )

ns-cloud-e4.googledomains.com

• 10 mx-east.fbi.gov ( 153.31.119.142 )
• 20 mx-west.fbi.gov ( 153.31.192.142 )

MX Record Consistency - OK

MX Record Count - OK

• 142.119.31.153.in-addr.arpa -> mx-east-ic.fbi.gov
• 142.192.31.153.in-addr.arpa -> mx-west-ic.fbi.gov

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 4
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 +mx ip4:153.31.0.0/16 ip4:52.245.185.78 -all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses: 153.31.0.0/16, 52.245.185.78
• Includes:
• DNS Lookups: 2
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

Errors:

• SPF record syntax is invalid

• DKIM Records Found: No

Warnings:

• No DKIM records found for common selectors

• Record: v=DMARC1; p=reject; rua=mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected]; pct=100
• Syntax: Valid
• Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]

DMARC External Validation:

• Valid external domains: dmarc.cyber.dhs.gov
• All external domains in your DMARC record are giving permission to send them DMARC reports.