Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Government Domains Outside .Gov and .Mil

Overview

Most U.S. government websites end in .gov or .mil, but some end in .com, .org, .net, or other top-level domains. To enhance discoverability and public trust, we maintain a list of known government domains that don’t end in .gov or .mil. Federal executive branch agencies must ensure their non-.gov or .mil domains are on the list. Read more in the Federal Zero Trust Strategy and Policies for Federal Agency Public Websites and Digital Services.

The list is used by several U.S. government services, including USA.gov to support their all-of-government search, and the .gov Registry to support an inventory of government domains.

Anyone can submit a domain to the list.

What domains are in scope of this list?

All non-.gov and non-.mil domain names registered by your agency, or by a contractor on behalf of your agency, must be included in this list. This includes domains that are not even used on the internet but are merely registered.

Domain Description Example
Registered to facilitate redirects agency.com which may redirect to agency.gov
Serve some infrastructure purpose,
even if not public-facing
agencyapi.com
agency-dashboard.net
Registered by a contractor on behalf of the agency agencycampaignsite.us
Registered long ago and is not expired legacyagency.org
Registered to prevent others from obtaining it
(sometimes called “defensive registrations”, which includes “typo” domains)
ouragency.com
0uragency.com
houragency.com

Do not add individual subdomains or hostnames within a domain that’s already on the list. For example, report agency.com, but do not also report saas.agency.com.

Report a “subdomain” if (1) your agency has a domain registered on a country-code top-level domain (or other “public suffix”) or (2) your agency publishes federal information on nongovernmental domains that you do not operate.

Domain Description Example
Registered on a country-code top level domain us-agency.org.uk
Subdomains publishing federal information exampleagency.university.edu

Domains registered by grantees

Generally, report a domain if it is registered pursuant to the terms of a grant and used for federal purposes, but do not report domains registered by grantees which your agency does not oversee or technologically support.

What domains are out of scope of this list?

This list excludes the domains of third-party online services where the agency is merely a user or a customer, not the domain’s registrant.

Domain Description Example
Software-as-a-service sites agency-my.sharepoint.com
agency-service.slack.com
Cloud-managed resources s3.amazonaws.com
Social media sites twitter.com
linkedin.com
Code repositories github.com/agency

How to Update the List

  1. Gather domain names. Domains are sometimes confused for “websites”, so consider asking for a “list of websites/domain registrations we manage” from the following types of roles:
    • External affairs, web publishing, or press team.
    • DNS managers, network/security operations.
    • Budget or accounting teams who might process domain registration payments to registrars like GoDaddy, Network Solutions, Namecheap, etc.

      If you have questions about whether a certain domain should be included, open an issue in Github or email us.

  2. Send your updates. We will review all submissions before including them on the list.
    • For multiple additions or any changes:
      • Open an issue in GitHub. No technical knowledge or code is required, but a GitHub account is. You can also open pull requests.
      • Submit bulk changes via email using our template (.csv format).
    • For single additions, use this form:


What’s Included in the List?

What’s Not Included in This List?

  • .gov domains – these are managed by the .gov Registry.
  • .mil domains – these are managed by DOD.
  • Subdomains or folders that are already covered by a higher-level domain.
  • State institutions of higher education or their board of regents.
  • K-12 school districts.
  • Local chambers of commerce or visitor bureaus.
  • Nonprofit municipal leagues or councils of government officials.
  • Nonprofit historical societies.
  • Transit authorities.