DNS Report for nist.gov

• gold.foundationdns.com

  • IPv4: 108.162.198.2, 162.159.60.2, 172.64.40.2
  • IPv6: 2606:4700:57::6ca2:c602, 2803:f800:52::a29f:3c02, 2a06:98c1:56::ac40:2802
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• gold.foundationdns.net

  • IPv4: 108.162.198.2, 172.64.40.2, 162.159.60.2
  • IPv6: 2803:f800:52::a29f:3c02, 2a06:98c1:56::ac40:2802, 2606:4700:57::6ca2:c602
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• gold.foundationdns.org

  • IPv4: 162.159.60.2, 108.162.198.2, 172.64.40.2
  • IPv6: 2606:4700:57::6ca2:c602, 2a06:98c1:56::ac40:2802, 2803:f800:52::a29f:3c02
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• gold.foundationdns.com

  • Status: Responded
  • IP(s): 129.6.13.49
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• gold.foundationdns.net

  • Status: Responded
  • IP(s): 129.6.13.49
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• gold.foundationdns.org

  • Status: Responded
  • IP(s): 129.6.13.49
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

gold.foundationdns.com

• Serial: 2347495803
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

gold.foundationdns.net

• Serial: 2347495803
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

gold.foundationdns.org

• Serial: 2347495803
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

Serial: 2347495803 - OK

REFRESH: 10000 - OK

RETRY: 2400 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

gold.foundationdns.com

• 0 nist-gov.mail.protection.outlook.com ( 52.101.8.50 )

gold.foundationdns.net

• 0 nist-gov.mail.protection.outlook.com ( 52.101.9.19 )

gold.foundationdns.org

• 0 nist-gov.mail.protection.outlook.com ( 52.101.11.12 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 19.9.101.52.in-addr.arpa -> mail-blapr09cu00103.inbound.protection.outlook.com
• 50.8.101.52.in-addr.arpa -> mail-dm6pr09cu00202.inbound.protection.outlook.com
• 12.11.101.52.in-addr.arpa -> mail-sa9pr09cu00104.inbound.protection.outlook.com

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 2
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:_spf1.nist.gov include:_spf2.nist.gov -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: _spf1.nist.gov, _spf2.nist.gov
• DNS Lookups: 3
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3jAZwNIjtFdkysBfSvf41tsViCKS8UW10+tEuOx7ymNSO5ggE0kYRaT0BeoUUW4p+R/IRGKJUsFwWMXAonTQVuFa6uVrT++OGN5tTibDiIqQIOzjHtpK0ucon40NelUImBixamFQ+o/3Vek5dO29buxtLr5VBgED4LifhM9bOU92VU3hkLakzwdY0arDoMOO
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; pct=100; rua=mailto:[email protected],mailto:[email protected], mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected]
• Syntax: Valid
• Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected],
• RUF (Forensic Reports): mailto:[email protected]

DMARC External Validation:

• Valid external domains: doc.gov
• All external domains in your DMARC record are giving permission to send them DMARC reports.