IPv4 Addresses
hsi.gov. 20 IN A 23.207.150.60
IPv6 Addresses
hsi.gov. 20 IN AAAA 2600:1408:C400:390:0:0:0:3FF9
Name Servers
hsi.gov. 1200 IN NS autumn.ns.cloudflare.com. hsi.gov. 1200 IN NS mario.ns.cloudflare.com.
SOA Details
hsi.gov. 1200 IN SOA autumn.ns.cloudflare.com. dns.cloudflare.com. 2412818004 10000 2400 604800 1800
Certificate Authority Authorization
No CAA records were returned at this registrable domain name. With no CAA policy, any public certificate authority (CA) may issue TLS certificates for names under this zone unless a parent publishes CAA; add issue / issuewild / iodef records to restrict issuance.
DMARC
Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).
pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).
100Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.
Forensic (per-failure) reports. Often omitted for privacy or volume.
hsi.gov. 900 IN DMARC v=DMARC1; p=reject; pct=100; rua=mailto:[email protected], mailto:[email protected]
DKIM
No DKIM TXT with `v=DKIM1` was returned for the selector names we probe automatically.
SPF (Sender Policy Framework)
| Qualifier | Mechanism | Target / value | Valid | Details |
|---|---|---|---|---|
| - Fail | all |
—
|
|
hsi.gov. 900 IN TXT "v=spf1 -all"
MTA-STS
This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).
DNSSEC Public Keys
hsi.gov. 1200 IN DNSKEY 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA== hsi.gov. 1200 IN DNSKEY 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==
Delegation Signer
hsi.gov. 1200 IN DS 2371 13 2 09C72E962A6E734FBDC02C02506FAEB2EDF6FBFDEB7D4F537BD67782E36BE2C2
DNSSEC Next Secure
hsi.gov. 1200 IN NSEC .hsi.gov ["TYPE65", "TYPE64", "TYPE61", "TYPE60", "TYPE59", "TYPE55", "TYPE53", "TYPE52", "DNSKEY", "NSEC", "RRSIG", "TYPE44", "TYPE37", "TYPE35", "SRV", "TYPE29", "AAAA", "TXT", "MX", "TYPE13", "PTR", "SOA", "NS", "A", "CAA", "TYPE256"]