cia.gov
CIA
cia.gov is registered with get.gov since June 26, 1998 (28.4 years). The registration expires on September 9, 2027. The site runs on Gatsby, React, Akamai and 3 other technologies. Its email security grade is C. Its SSL certificate is issued by DigiCert Inc and is valid for 95 more days.
- Domain age
- 28.4 yrs
- Technologies
- 6
- Email security
- C
- SSL days left
- 95
Registration
| Registrar | get.gov |
|---|---|
| IANA ID | 8888888 |
| Registered | June 26, 1998 |
| Expires | September 9, 2027 |
| Updated | September 13, 2026 |
| Status | server transfer prohibited |
| Name servers | a1-22.akam.net, a12-65.akam.net, a13-65.akam.net, a16-67.akam.net, a22-66.akam.net, a3-64.akam.net |
| DNSSEC | Signed |
| Registrant | Central Intelligence Agency, United States |
DNS records
| Type | Value | TTL |
|---|---|---|
| A | 23.206.172.62 | 20 |
| A | 23.206.172.78 | 20 |
| MX | mail3.cia.gov 10 | 3720 |
| MX | mail4.cia.gov 10 | 3720 |
| NS | a1-22.akam.net | 86400 |
| NS | a3-64.akam.net | 86400 |
| NS | a12-65.akam.net | 86400 |
| NS | a13-65.akam.net | 86400 |
| NS | a16-67.akam.net | 86400 |
| NS | a22-66.akam.net | 86400 |
| CAA | iodef 0 mailto:[email protected] | 1800 |
| CAA | issue 0 digicert.com | 1800 |
| TXT | v=spf1 mx -all | 300 |
| AAAA | 2600:141b:1c00:1f::1730:e0d1 | 20 |
| AAAA | 2600:141b:1c00:1f::1730:e0d3 | 20 |
Technology stack
SSL certificate
| Valid | Valid |
|---|---|
| Issuer | US, DigiCert Global G3 TLS ECC SHA384 2020 CA1, DigiCert Inc |
| Expires | February 13, 2027 |
| Days remaining | 95 |
| Protocol | TLSv1.3 |
| Names | www.cia.gov, cia.gov |
Email security
- warnDKIM key found (selector: s1) but it is only 1024 bits; 2048 is recommended.
- warnNo MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
- warnNo TLS-RPT record, so you won't hear about failed encrypted deliveries.
- warnNo BIMI record (optional: shows your logo next to your emails in supporting inboxes).
- goodSPF record found.
- goodSPF ends with -all: servers you have not listed are rejected (hard fail).
- goodDMARC policy is quarantine: failing mail goes to spam. Move to p=reject for full protection.
- goodDMARC aggregate reports are sent to mailto:[email protected].
- good2 MX record(s) found.
Homepage metadata
| Title | CIA |
|---|---|
| Language | en |
| Indexable | Yes |
| Word count | 453 |
About cia.gov
Who is the registrar of cia.gov?
cia.gov is registered with get.gov (IANA ID 8888888).
When does cia.gov expire?
The current registration of cia.gov expires on September 9, 2027. It was first registered on June 26, 1998.
What technology does cia.gov use?
We detected 6 technologies on cia.gov, including Akamai, Gatsby, React, Swiper, Java, HSTS.
Does cia.gov protect its email with SPF and DMARC?
cia.gov scores 76/100 (grade C) for email security. DKIM key found (selector: s1) but it is only 1024 bits; 2048 is recommended. No MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
What are the name servers of cia.gov?
cia.gov uses a1-22.akam.net, a3-64.akam.net, a12-65.akam.net, a13-65.akam.net, a16-67.akam.net, a22-66.akam.net.