InboxAudit

sec.gov email records

What sec.gov publishes in public DNS for SPF, DKIM, DMARC, MX and BIMI, resolved on 2026-08-04.

SPF

v=spf1 include:_mail.sec.gov include:_sas.sec.gov include:_sas1.sec.gov include:_sas2.sec.gov ip4:162.138.52.160 ip4:162.138.52.161 ip4:162.138.53.160 ip4:162.138.53.161 include:spf.protection.outlook.com -all
10 of 10 DNS lookups — close to the limit.

The record authorises this sending platform: Microsoft 365.

DMARC

v=DMARC1; p=reject; pct=100; rua=mailto:DMARC@sec.gov!10m,mailto:SOCReporting@sec.gov!10m,mailto:reports@dmarc.cyber.dhs.gov
policy
p=reject
applies to
100% of mail
reports
mailto:DMARC@sec.gov!10m,mailto:SOCReporting@sec.gov!10m,mailto:reports@dmarc.cyber.dhs.gov
alignment
adkim=r, aspf=r

DKIM

Keys found on 2 of 10 probed selectors:

selector1selector2

MX

sec-gov.mail.protection.outlook.com

Notes on this configuration

SPF uses exactly 10 of the 10 permitted DNS lookups. It is valid, but has no headroom.

Check it live

The above is a snapshot from 2026-08-04. Re-resolve it now: