sec.gov email records
What sec.gov publishes in public DNS for SPF, DKIM, DMARC, MX and BIMI, resolved on 2026-08-04.
SPF
v=spf1 include:_mail.sec.gov include:_sas.sec.gov include:_sas1.sec.gov include:_sas2.sec.gov ip4:162.138.52.160 ip4:162.138.52.161 ip4:162.138.53.160 ip4:162.138.53.161 include:spf.protection.outlook.com -all
10 of 10 DNS lookups — close to the limit.
The record authorises this sending platform: Microsoft 365.
DMARC
v=DMARC1; p=reject; pct=100; rua=mailto:DMARC@sec.gov!10m,mailto:SOCReporting@sec.gov!10m,mailto:reports@dmarc.cyber.dhs.gov
- policy
- p=reject
- applies to
- 100% of mail
- reports
- mailto:DMARC@sec.gov!10m,mailto:SOCReporting@sec.gov!10m,mailto:reports@dmarc.cyber.dhs.gov
- alignment
- adkim=r, aspf=r
DKIM
Keys found on 2 of 10 probed selectors:
MX
Notes on this configuration
SPF uses exactly 10 of the 10 permitted DNS lookups. It is valid, but has no headroom.
Check it live
The above is a snapshot from 2026-08-04. Re-resolve it now: