32
records
IPv4 Addresses
TTL
cisa.gov. 19 IN A 23.47.17.56
IPv6 Addresses
TTL
cisa.gov. 28 IN AAAA 2600:1408:C400:386:0:0:0:3FF9 cisa.gov. 28 IN AAAA 2600:1408:C400:390:0:0:0:3FF9
Name Servers
TTL
cisa.gov. 572 IN NS blue.foundationdns.com. cisa.gov. 572 IN NS blue.foundationdns.net. cisa.gov. 572 IN NS blue.foundationdns.org.
Mail Servers
TTL
cisa.gov. 300 IN MX 10 mxb-00376703.gslb.gpphosted.com. cisa.gov. 300 IN MX 10 mxa-00376703.gslb.gpphosted.com.
SOA Details
TTL
20m
SOA
Responsible
dns.cloudflare.com
SOA
Serial
2412728721
SOA
Times
Refresh
2h
Retry
40m
Expire
7d
Minimum TTL
30m
cisa.gov. 1200 IN SOA blue.foundationdns.com. dns.cloudflare.com. 2412728721 10000 2400 604800 1800
Certificate Authority Authorization
TTL
No CAA records were returned at this registrable domain name. With no CAA policy, any public certificate authority (CA) may issue TLS certificates for names under this zone unless a parent publishes CAA; add issue / issuewild / iodef records to restrict issuance.
DMARC
TTL
DMARC
Policy
Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).
none
quarantine
reject
20m
DMARC
Percentage
pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).
100
DMARC
RUA
mailto:[email protected]
mailto:[email protected]
Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.
DMARC
RUF
Forensic (per-failure) reports. Often omitted for privacy or volume.
No forensic report URIs (RUF).
cisa.gov. 1200 IN DMARC v=DMARC1; p=reject; pct=100; rua=mailto:[email protected], mailto:[email protected]
DKIM
TTL
DKIM
Selector
selector1
v=DKIM1
k=rsa
19m
Public Key
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv32BRAJaAOsx...
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv32BRAJaAOsxAp31ZqQwd7RYfbYowvb3F7lq8WQEyasI6w7Gm0bxPW57TFM04fM5flf1PYyCDSa3ckQzSQLYmMx9HiXYJYF1Dpk9PnjTarbdR9mm9fc7iBXT2pTFNJw+SRMH3NRrbkefv8GqqLdJotgCl2vWoyRlfKCANCFq5Bbq4qaztXqU/cHRurG8ZVSF7ZrhY4EBKvpzAyIisrf2g2Gky+vO4LTMrgZeNnA/OyHmWmvlUC58e06jBLSysYyh19O4MiU5eUhuT7MYTLWz6fIOl4PaT9HkmM0rH/fgcGSYc8ajCsrvxYA8LgoWR9IzYq5vYzDWLxSo/J0c+6pVWQIDAQAB
cisa.gov. 1199 IN DKIM v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv32BRAJaAOsxAp31ZqQwd7RYfbYowvb3F7lq8WQEyasI6w7Gm0bxPW57TFM04fM5flf1PYyCDSa3ckQzSQLYmMx9HiXYJYF1Dpk9PnjTarbdR9mm9fc7iBXT2pTFNJw+SRMH3NRrbkefv8GqqLdJotgCl2vWoyRlfKCANCFq5Bbq4qaztXqU/cHRurG8ZVSF7ZrhY4EBKvpzAyIisrf2g2Gky+vO4LTMrgZeNnA/OyHmWmvlUC58e06jBLSysYyh19O4MiU5eUhuT7MYTLWz6fIOl4PaT9HkmM0rH/fgcGSYc8ajCsrvxYA8LgoWR9IzYq5vYzDWLxSo/J0c+6pVWQIDAQAB;
SPF (Sender Policy Framework)
TTL
SPF
SPFv1
| Qualifier | Mechanism | Target / value | Valid | Details |
|---|---|---|---|---|
| + Pass | include |
|
||
| + Pass | include |
|
||
| + Pass | include |
|
||
| - Fail | all |
—
|
|
5m
cisa.gov. 300 IN TXT "v=spf1 include:spf.dhs.gov include:spf.protection.outlook.com include:spf-00376703.gpphosted.com -all"
MTA-STS
TTL
This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).
Text Content
TTL
MS=ms36056523
5m
MS=ms41452370
5m
MS=ms53160703
5m
adobe-idp-site-verification=edfd88b4c2bdf65395c78b55da3580466eefa9aa874d5bcfb853692813e80515
5m
atlassian-domain-verification=6giaC2mSFTvNOIaXO5fDn6FluCJU7Pqp7jLmCm7A7AeajrX9wswfX7dDFbBG3nzk
5m
censys-domain-verification=kSZxqevdrY_nf9ogHWhuUq2O39C9Lkj-pSfnrCzSOVxO
5m
censys-domain-verification=oCKV9OzJ1EtsMPZGDfdkccVF2WRuGqmhhozTHjaNAsvH
5m
google-site-verification=BNRBfY90BM54Mf_pgL4Eg07IkwbGvq5nsdZCOYadDlM
5m
google-site-verification=wsLVyeZYgv0NLikdmfm2m3XPP-986Ylo8XxUkrjIOvA
5m
openai-domain-verification=dv-9sool2N0pERxBxulfzX1UsNx
5m
TXT
—
_9vww26511eydsytzuhsqlonuwahjiva
5m
TXT
—
_e01yoinuk3n6xrtnc8q3m9bdjyihdd7
5m
TXT
—
_rr8gice4wv589e4uxop5zqhh6gbqh32
5m
TXT
—
_tufdw17aa2wht723upz8w56htpvpgkw
5m
TXT
—
f188eb27-a746-4aa8-b160-eb68b0aab05d
5m
TXT
—
pL0QIhJMs23KMmvUBrrneOoXtAFoIQ
5m
cisa.gov. 300 IN TXT "MS=ms36056523" cisa.gov. 300 IN TXT "MS=ms41452370" cisa.gov. 300 IN TXT "MS=ms53160703" cisa.gov. 300 IN TXT "adobe-idp-site-verification=edfd88b4c2bdf65395c78b55da3580466eefa9aa874d5bcfb853692813e80515" cisa.gov. 300 IN TXT "atlassian-domain-verification=6giaC2mSFTvNOIaXO5fDn6FluCJU7Pqp7jLmCm7A7AeajrX9wswfX7dDFbBG3nzk" cisa.gov. 300 IN TXT "censys-domain-verification=kSZxqevdrY_nf9ogHWhuUq2O39C9Lkj-pSfnrCzSOVxO" cisa.gov. 300 IN TXT "censys-domain-verification=oCKV9OzJ1EtsMPZGDfdkccVF2WRuGqmhhozTHjaNAsvH" cisa.gov. 300 IN TXT "google-site-verification=BNRBfY90BM54Mf_pgL4Eg07IkwbGvq5nsdZCOYadDlM" cisa.gov. 300 IN TXT "google-site-verification=wsLVyeZYgv0NLikdmfm2m3XPP-986Ylo8XxUkrjIOvA" cisa.gov. 300 IN TXT "openai-domain-verification=dv-9sool2N0pERxBxulfzX1UsNx" cisa.gov. 300 IN TXT "_9vww26511eydsytzuhsqlonuwahjiva" cisa.gov. 300 IN TXT "_e01yoinuk3n6xrtnc8q3m9bdjyihdd7" cisa.gov. 300 IN TXT "_rr8gice4wv589e4uxop5zqhh6gbqh32" cisa.gov. 300 IN TXT "_tufdw17aa2wht723upz8w56htpvpgkw" cisa.gov. 300 IN TXT "f188eb27-a746-4aa8-b160-eb68b0aab05d" cisa.gov. 300 IN TXT "pL0QIhJMs23KMmvUBrrneOoXtAFoIQ"
DNSSEC Public Keys
TTL
DNSKEY
257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==
9m
DNSKEY
256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==
9m
cisa.gov. 572 IN DNSKEY 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ== cisa.gov. 572 IN DNSKEY 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==
Delegation Signer
TTL
DS
2371 13 2 5F15E517D7A353D755D9D3F8548A3475CE88A738E62B766F5E33CFC4163AB934
9m
cisa.gov. 571 IN DS 2371 13 2 5F15E517D7A353D755D9D3F8548A3475CE88A738E62B766F5E33CFC4163AB934
DNSSEC Next Secure
TTL
NSEC
.cisa.gov ["TYPE65", "TYPE64", "TYPE61", "TYPE60", "TYPE59", "TYPE55", "TYPE53", "TYPE52", "DNSKEY", "NSEC", "RRSIG", "TYPE44", "TYPE37", "TYPE35", "SRV", "TYPE29", "AAAA", "TXT", "MX", "TYPE13", "PTR", "SOA", "NS", "A", "CAA", "TYPE256"]
20m
cisa.gov. 1200 IN NSEC .cisa.gov ["TYPE65", "TYPE64", "TYPE61", "TYPE60", "TYPE59", "TYPE55", "TYPE53", "TYPE52", "DNSKEY", "NSEC", "RRSIG", "TYPE44", "TYPE37", "TYPE35", "SRV", "TYPE29", "AAAA", "TXT", "MX", "TYPE13", "PTR", "SOA", "NS", "A", "CAA", "TYPE256"]