DNS Report for uspto.gov

• gold.foundationdns.org

  • IPv4: 162.159.60.2, 108.162.198.2, 172.64.40.2
  • IPv6: 2606:4700:57::6ca2:c602, 2803:f800:52::a29f:3c02, 2a06:98c1:56::ac40:2802
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• gold.foundationdns.net

  • IPv4: 108.162.198.2, 172.64.40.2, 162.159.60.2
  • IPv6: 2606:4700:57::6ca2:c602, 2803:f800:52::a29f:3c02, 2a06:98c1:56::ac40:2802
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• gold.foundationdns.com

  • IPv4: 108.162.198.2, 162.159.60.2, 172.64.40.2
  • IPv6: 2a06:98c1:56::ac40:2802, 2803:f800:52::a29f:3c02, 2606:4700:57::6ca2:c602
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• gold.foundationdns.org

  • Status: Responded
  • IP(s): 151.207.245.37, 151.207.128.60
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• gold.foundationdns.net

  • Status: Responded
  • IP(s): 151.207.245.37, 151.207.128.60
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• gold.foundationdns.com

  • Status: Responded
  • IP(s): 151.207.128.60, 151.207.245.37
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

gold.foundationdns.org

• Serial: 2014115465
• Refresh: 10800
• Retry: 1080
• Expire: 2419200
• Minimum TTL: 900

gold.foundationdns.net

• Serial: 2014115465
• Refresh: 10800
• Retry: 1080
• Expire: 2419200
• Minimum TTL: 900

gold.foundationdns.com

• Serial: 2014115465
• Refresh: 10800
• Retry: 1080
• Expire: 2419200
• Minimum TTL: 900

Serial: 2014115465 - OK

REFRESH: 10800 - OK

RETRY: 1080 - OK

EXPIRE: 2419200 - OK

MINIMUM TTL: 900 - Note: Outside recommended range (1-3 hours)

gold.foundationdns.org

• 5 uspto-gov.mail.protection.outlook.com ( 52.101.11.12 )

gold.foundationdns.net

• 5 uspto-gov.mail.protection.outlook.com ( 52.101.8.52 )

gold.foundationdns.com

• 5 uspto-gov.mail.protection.outlook.com ( 52.101.8.50 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 50.8.101.52.in-addr.arpa -> mail-dm6pr09cu00202.inbound.protection.outlook.com
• 12.11.101.52.in-addr.arpa -> mail-sa9pr09cu00104.inbound.protection.outlook.com
• 52.8.101.52.in-addr.arpa -> mail-ds0pr09cu00104.inbound.protection.outlook.com

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 2
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:uspto.gov._nspf.valigov.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.valigov.email ~all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: uspto.gov._nspf.valigov.email, %{i}._ip.%{h}._ehlo.%{d}._spf.valigov.email
• DNS Lookups: 7
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4h0AmEdcYMpIntfjyQyV1uglkW0JfxHCsovEXWtbTPiHdYUVQDwGyJ0l0zSF+W9NHlEFRtbP+ecWotr18QnMN1Bs8/0HlBFcxSi92UtIOgO8v7+Aem2u1rQLvtYNp8ZjZTOe+oxWNZvxfymXAw+KqRSkbSGJcjVQQ1PAsqtpw+QIDAQAB; n=1024,1456438036,1
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; rua=mailto:[email protected],mailto:[email protected],mailto:[email protected]
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected], mailto:[email protected]

DMARC External Validation:

• Valid external domains: valigov.email, dmarc.cyber.dhs.gov
• All external domains in your DMARC record are giving permission to send them DMARC reports.