irs.gov

Live email deliverability and anti-spoofing audit. Every value below was read from public DNS at the moment this page was generated.

86/100 — Solid configuration with a few gaps worth closing. Accepts mail · Protected against spoofing

Findings

dkim

No DKIM key found at any common selector. Either DKIM is not configured, or it uses a custom selector we cannot discover from DNS alone.

Fix: Enable DKIM signing at your mail provider and publish the selector they give you.
mta sts

No MTA-STS policy, so inbound mail can be downgraded to an unencrypted connection.

Fix: Publish _mta-sts.irs.gov and host a policy at https://mta-sts.irs.gov/.well-known/mta-sts.txt.

3 mail exchangers published.

10 emgc.irs.gov, 10 emge.irs.gov, 20 emgw.irs.gov

spf

SPF is published and enforcing.

v=spf1 ip4:152.216.0.0/20 ip6:2610:30::/32 -all

dmarc

DMARC is enforcing with p=reject.

v=DMARC1; p=reject; rua=mailto:dmarc-agg-feed@ofdp.irs.gov,mailto:reports@dmarc.cyber.dhs.gov; ruf=mailto:dmarc-for-feed@ofdp.irs.gov; fo=1

MX	`10 emgc.irs.gov` `10 emge.irs.gov` `20 emgw.irs.gov`
SPF	`v=spf1 ip4:152.216.0.0/20 ip6:2610:30::/32 -all`
DMARC	`v=DMARC1; p=reject; rua=mailto:dmarc-agg-feed@ofdp.irs.gov,mailto:reports@dmarc.cyber.dhs.gov; ruf=mailto:dmarc-for-feed@ofdp.irs.gov; fo=1`
DKIM selectors	none discovered
MTA-STS	not published
TLS-RPT	not published
BIMI	not published
DNSSEC	validating

Run this check in your own code

Same data, as JSON, in one request. No SMTP probing, no stored recipient data, 250 free calls a month.

curl "https://mailgrade.dev/v1/domain?domain=irs.gov"

Also available: /v1/verify?email=… for individual addresses, and /v1/verify/batch for lists.