IPv4 Addresses
nist.gov. 300 IN A 172.65.90.24 nist.gov. 300 IN A 172.65.90.25 nist.gov. 300 IN A 172.65.90.26 nist.gov. 300 IN A 172.65.90.27
IPv6 Addresses
nist.gov. 300 IN AAAA 2606:4700:78:0:0:90:0:180 nist.gov. 300 IN AAAA 2606:4700:78:0:0:90:0:181 nist.gov. 300 IN AAAA 2606:4700:78:0:0:90:0:182 nist.gov. 300 IN AAAA 2606:4700:78:0:0:90:0:183
Name Servers
nist.gov. 1200 IN NS gold.foundationdns.com. nist.gov. 1200 IN NS gold.foundationdns.net. nist.gov. 1200 IN NS gold.foundationdns.org.
Mail Servers
nist.gov. 300 IN MX 0 nist-gov.mail.protection.outlook.com.
SOA Details
nist.gov. 1200 IN SOA gold.foundationdns.com. dns.cloudflare.com. 2409536912 10000 2400 604800 1800
Certificate Authority Authorization
No CAA records were returned at this registrable domain name. With no CAA policy, any public certificate authority (CA) may issue TLS certificates for names under this zone unless a parent publishes CAA; add issue / issuewild / iodef records to restrict issuance.
DMARC
Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).
pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).
100Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.
Forensic (per-failure) reports. Often omitted for privacy or volume.
nist.gov. 300 IN DMARC v=DMARC1; p=reject; pct=100; rua=mailto:[email protected],mailto:[email protected], mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected]
DKIM
nist.gov. 1199 IN DKIM v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqKvpMFXGELeB1Dki+17+h9USQHjMG/EudmMW7oNKU8++xVtjoubHCe+Qm0BPlh2GewPlrfJct45N7XCIS2W9dZrRL24g4yseDbFDrWd0T+NkFlK7JSe/iaJ6uglXoDriS91ZDpzXS3e5aG/4hCPvXyYisBgfXHHQb2SJUiVe5Dhgv75rWgfphRu8N1f29ckPD+kC5DoVnhXRAXJyNV+YEiH8FWqg7GMtkr/xFPcSfTCIkxUdolA64pCTrpJ9R5dIGkdeTDpAKcrlIOacoWbo9KK6ghZOk19KrUrEcwmz1q0Stow0jG2sa4MLNLzZN0ZSJWNYDaXbRITRPbQtXpBvQIDAQAB; nist.gov. 1199 IN DKIM v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3jAZwNIjtFdkysBfSvf41tsViCKS8UW10+tEuOx7ymNSO5ggE0kYRaT0BeoUUW4p+R/IRGKJUsFwWMXAonTQVuFa6uVrT++OGN5tTibDiIqQIOzjHtpK0ucon40NelUImBixamFQ+o/3Vek5dO29buxtLr5VBgED4LifhM9bOU92VU3hkLakzwdY0arDoMOOj7HWMS4B5EnCwB668ANmC35xY2prjz8L0Do45AaJBF/laQx504sVsygAD8ur8ZD20j7URNgckD2J6ziGosUjI0sdMRvPLQYesm1ATk9lqibIGk6Pk/MyLndfX1ffWh0yFEpBGXvWzw1AWlD/HhJeQIDAQAB;
SPF (Sender Policy Framework)
| Qualifier | Mechanism | Target / value | Valid | Details |
|---|---|---|---|---|
| + Pass | include |
|
||
| + Pass | include |
|
||
| - Fail | all |
—
|
|
nist.gov. 300 IN TXT "v=spf1 include:_spf1.nist.gov include:_spf2.nist.gov -all"
MTA-STS
This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).
Text Content
nist.gov. 300 IN TXT "MS=ms22398849" nist.gov. 300 IN TXT "atlassian-domain-verification=xVa84aCbqa1pJZZdpB0gGm0ZNukDUU4TBzccNbFkyozIg3QXHaufaQaczvEDG3Jp" nist.gov. 300 IN TXT "box-domain-verification=4d49553685eee3edbcf58b736eb4c42febff4e1741da8db3098f2bb3d161d90f" nist.gov. 300 IN TXT "cisco-ci-domain-verification=1b1e68d4cf0e84478115596723f00e17a848c659bb11f53b58f8f2cd84b7e111" nist.gov. 300 IN TXT "google-site-verification=oJSFVUoM3RN44bzuiI9F3qWzWxTqmrawzMycAD_NUcY" nist.gov. 300 IN TXT "jamf-site-verification=Sr15KQEdTRZZXqaxbFaFQw" nist.gov. 300 IN TXT "openai-domain-verification=dv-LH2I25vAcFPzjYDPYCU2t6Uy" nist.gov. 300 IN TXT "_hie8b7uqvafayfkdb47ag5t5up1nxbb" nist.gov. 300 IN TXT "domain-verification=J6aCmM09zEcfzyPp57W7AtDczKeyPHwj_WRoqnt0g0Q"
DNSSEC Public Keys
nist.gov. 1200 IN DNSKEY 256 3 8 AwEAAeNZU6cdEr+o3lMoluay4XV/dgC/a/p6/RQCgKbzPe1S6DCa4N6mru+AL8JTkYEKiwCnWoW5ruzS16rK9oRcP4/RjZOO7bopWiTXciWOQN6IJ/SbeEtp1m3AlL3OHLAv9lY3sbRydMHfbbsbCijDd3chIqS0BabZyI0EDMCD6NGJroPf0ERqV7D5LfsvT59BCZpLIp3u6MZpIXieqPQKKe0= nist.gov. 1200 IN DNSKEY 257 3 8 AwEAAeaJ7qqumy0GJV00pMwozYZ+2Fj+VxfbCzjLL428MHvSceglIf6of3GTd+BjiYnH7ohXMhBNcEikXIORas0fMrTYa5Ak2/znKVizxANVL+7TThgE2Wwi0dgy+yMQaGAWSfC4LhnHhMJ28I24ce+6pDHF6xwr7HECRxEK+bMIantoYtQkFTkdkLrMagnPh9kRp66dQuzKtbbMkfd8n8fEhni3iziEqVK2pST5bYMJm2IkSscAz8NfrRqya+flm/fy8RRFSYVcfPaOC3sZf91H0fBkyBbBfM3pRihMUyg3TBZ/rg9NZiM0yTf+scSH+E3w+WRkC+/xOouhyYZE4NxqfdM=
Delegation Signer
nist.gov. 1200 IN DS 33751 8 2 90C6CD28626CA7B8E3A1FACAD58D20D486E52DF040B9B2F085ACD5C703E624C6
DNSSEC Next Secure
nist.gov. 1200 IN NSEC .nist.gov ["TYPE65", "TYPE64", "TYPE61", "TYPE60", "TYPE59", "TYPE55", "TYPE53", "TYPE52", "DNSKEY", "NSEC", "RRSIG", "TYPE44", "TYPE37", "TYPE35", "SRV", "TYPE29", "AAAA", "TXT", "MX", "TYPE13", "SOA", "NS", "A", "CAA", "TYPE256"]