cia.gov

Observed Jul 21, 2026, 19:11 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onAkamai International B.V

Secured byDigiCert

Registered withget.gov

IPv6 · 1 subdomain · government

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat cia.gov actually stands on - every host below is a signed observation

cia.gov

A / AAAA

23.53.35.16423.53.35.1672600:1408:c400:12::17cd:6b162600:1408:c400:12::17cd:6b18

Akamai International B.Vserves the site

a1-22.akam.neta3-64.akam.neta12-65.akam.neta13-65.akam.net+2 more

akam.netanswers its DNS

mail3.cia.govmail4.cia.gov

cia.govreceives its email

TLS

www.cia.gov

DigiCert Incissued its certificate

DNS Records

A 2

23.53.35.164
23.53.35.167

AAAA 2

2600:1408:c400:12::17cd:6b16
2600:1408:c400:12::17cd:6b18

MX 2

10mail3.cia.gov
10mail4.cia.gov

TXT 2

v=spf1 mx -all
v=DMARC1; p=quarantine; sp=quarantine; pct=100; rua=mailto:demarcreports@uce.cia.gov; ruf=mailto:demarcfailures@uce.cia.gov; ri=86400; aspf=s; adkim=s; fo=1

NS 6

a1-22.akam.net
a3-64.akam.net
a12-65.akam.net
a13-65.akam.net
a16-67.akam.net
a22-66.akam.net

SOA 1

a1-22.akam.net monrpt.cia.gov

CAA 2

iodef "mailto:caanotices@uce.cia.gov"
issue "digicert.com"

TLS Certificates (2)

Common Name	Issuer	Expires
`www.cia.gov`	C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1	Wed, 12 Aug 2026 23:59:59 +0000
`DigiCert Global G3 TLS ECC SHA384 2020 CA1`	C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G3	Sun, 13 Apr 2031 23:59:59 +0000

Subdomains (1)

www.cia.gov

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cia.gov. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/cia.gov">
  <img src="https://domaindrift.io/badge/cia.gov.svg"
       width="300" height="64" alt="DomainDrift signed observations for cia.gov">
</a>

Ed25519 Receipt

Receipt ID: rcpt_1a9d101c05f86669
Output Hash: c74c9ed37a406b9da59d1cd61d721f6fae8acfdb1779efa70a687bb8251243c9
Signature: ed25519:fbeeda7b48013e487100ac3344b07e9cb25d202967f285aef0d0526a033cb190c6ade211392ef5a901cfee3de8fdcb2df8931f388c3c190471002dcd0a9fd20b
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/cia.gov