Skip to content
Gridlode
Rank #3,321Updated November 10, 2026

nsa.gov

National Security Agency | Central Security Service

nsa.gov is registered with get.gov since October 2, 1997 (29.1 years). The registration expires on August 19, 2027. The site runs on ASP.NET, cdnjs, Font Awesome and 8 other technologies. Its email security grade is C. Its SSL certificate is issued by Let's Encrypt and is valid for 83 more days.

Domain age
29.1 yrs
Technologies
11
Email security
C
SSL days left
83

Registration

Registrarget.gov
IANA ID8888888
RegisteredOctober 2, 1997
ExpiresAugust 19, 2027
UpdatedAugust 14, 2026
Statusserver transfer prohibited
Name serversa1-107.akam.net, a11-66.akam.net, a12-67.akam.net, a2-64.akam.net, a24-65.akam.net, a5-66.akam.net
DNSSECSigned
RegistrantDepartment of Defense, United States

DNS records

TypeValueTTL
A184.31.94.24820
MXpri-jeemsg.eemsg.mail.mil 103600
MXsec-jeemsg.eemsg.mail.mil 203600
MXw455-emsm-u10.ncsc.mil 303600
MXw455-emsm-u11.ncsc.mil 303600
MXemsm-gh1-uea10.ncsc.mil 303600
MXemsm-gh1-uea11.ncsc.mil 303600
NSa2-64.akam.net28800
NSa5-66.akam.net28800
NSa1-107.akam.net28800
NSa11-66.akam.net28800
NSa12-67.akam.net28800
NSa24-65.akam.net28800
TXTms=ms922303173600
TXTv=spf1 ip4:214.29.60.2/32 ip4:214.29.60.3/32 ip4:214.80.121.17/32 ip4:214.80.121.18/32 include:_spf.eemsg.mail.mil include:amazonses.com ~all3600

Technology stack

SSL certificate

ValidValid
IssuerUS, YR2, Let's Encrypt
ExpiresFebruary 2, 2027
Days remaining83
ProtocolTLSv1.3
Names2017dodtransition.defense.gov, 2025dodtransition.defense.gov, actuary.defense.gov, armedforcessports.defense.gov, atsdio.defense.gov, basicresearch.defense.gov, business.defense.gov, cmsmedia.defense.gov, comptroller.defense.gov, ctip.defense.gov, cyberwork.defense.gov, dam.defense.gov

Email security

CScore 68/100 across SPF, DMARC, DKIM, MTA-STS and BIMI.
  • warnNo DKIM key found at common selectors (google, selector1, selector2, default, k1, k2, s1, s2, ...). DKIM may still use a custom selector we cannot guess.
  • warnNo MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
  • warnNo TLS-RPT record, so you won't hear about failed encrypted deliveries.
  • warnNo BIMI record (optional: shows your logo next to your emails in supporting inboxes).
  • goodSPF record found.
  • goodSPF ends with ~all: servers you have not listed are marked as suspicious (soft fail).
  • goodDMARC policy is reject: mail that fails authentication is blocked.
  • goodDMARC aggregate reports are sent to mailto:[email protected], mailto:[email protected].
  • good6 MX record(s) found.

Homepage metadata

TitleNational Security Agency | Central Security Service
DescriptionThe National Security Agency/Central Security Service (NSA/CSS) leads the U.S. Government in cryptology that encompasses both foreign signals intelligence (SIGINT) insights and cybersecurity products and services and provides the Nation decision advantage in competition, crisis, and conflict.
Languageen-US
Structured dataOrganization
IndexableYes
Word count839

About nsa.gov

Who is the registrar of nsa.gov?

nsa.gov is registered with get.gov (IANA ID 8888888).

When does nsa.gov expire?

The current registration of nsa.gov expires on August 19, 2027. It was first registered on October 2, 1997.

What technology does nsa.gov use?

We detected 11 technologies on nsa.gov, including cdnjs, Font Awesome, Google Fonts, Animate.css, AOS, jQuery.

Does nsa.gov protect its email with SPF and DMARC?

nsa.gov scores 68/100 (grade C) for email security. No DKIM key found at common selectors (google, selector1, selector2, default, k1, k2, s1, s2, ...). DKIM may still use a custom selector we cannot guess. No MTA-STS: mail sent to you can be downgraded to an unencrypted connection.

What are the name servers of nsa.gov?

nsa.gov uses a2-64.akam.net, a5-66.akam.net, a1-107.akam.net, a11-66.akam.net, a12-67.akam.net, a24-65.akam.net.