← Check another domain

nasa.gov

87/100

A

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	warn	7/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	ok	10/10
Subdomain takeover	ct logs busy	10/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	signed	5/5

Recommendations

Simplify SPF includes on nasa.gov — more than 10 DNS lookups causes SPF PermError
Publish MTA-STS: add _mta-sts.nasa.gov TXT and host a policy at https://mta-sts.nasa.gov/.well-known/mta-sts.txt

Details

Area	Detail
DMARC	v=DMARC1; p=reject; fo=1; rua=mailto:dmarcmail@mail.nasa.gov,mailto:reports@dmarc.cyber.dhs.gov
SPF	v=spf1 include:_spf-4a.nasa.gov include:_spf-4b.nasa.gov include:_spf-4c.nasa.gov include:_spf-4d.nasa.gov include:_spf-4g.nasa.gov include:_spf-4m.nasa.gov include:_spf-4x.nasa.gov include:_spf-6a.na
DKIM selectors	selector1
TLS certificate	Ok (57 days remaining) — CN=E8,O=Let's Encrypt,C=US
WHOIS registrar	get.gov
WHOIS expires	2026-07-31T14:55:32.905Z
Subdomains	CT logs temporarily unavailable — retry shortly
DNSSEC	Signed