InboxAudit

cdc.gov email records

What cdc.gov publishes in public DNS for SPF, DKIM, DMARC, MX and BIMI, resolved on 2026-08-04.

SPF

v=spf1 ip4:51.5.72.0/24 ip4:172.81.81.38 ip4:51.4.72.0/24 ip4:51.5.80.0/27 ip4:51.4.80.0/27 ip4:172.81.81.50 ip4:172.81.82.50 ip4:63.123.152.4 ip4:40.92.0.0/15 ip4:172.81.82.79 ip4:172.81.80.64 ip4:172.81.81.39 ip4:172.81.82.87 ip4:172.81.82.88 ip4:155.95.96.50 ip4:155.95.86.50 ip4:23.90.98.102 ip4:124.17.27.36 ip4:149.72.0.0/16 ip4:198.21.0.0/21 ip4:50.31.32.0/19 ip4:167.89.0.0/17 ip4:68.232.140.57 ip4:68.232.140.79 include:_s0.cdc.gov -all
10 of 10 DNS lookups — close to the limit.

DMARC

v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:8idhoybh@ag.us.dmarcian.com,mailto:reports@dmarc.cyber.dhs.gov; ruf=mailto:8idhoybh@fr.us.dmarcian.com;
policy
p=reject
applies to
100% of mail
reports
mailto:8idhoybh@ag.us.dmarcian.com,mailto:reports@dmarc.cyber.dhs.gov
alignment
adkim=r, aspf=r

DKIM

Keys found on 4 of 10 probed selectors:

selector1selector2k1s1

MX

primary.us.etp.fireeyegov.comalt1.us.etp.fireeyegov.comalt2.us.etp.fireeyegov.comalt3.us.etp.fireeyegov.com

Notes on this configuration

SPF uses exactly 10 of the 10 permitted DNS lookups. It is valid, but has no headroom.

Check it live

The above is a snapshot from 2026-08-04. Re-resolve it now: