cms.gov

.gov user

First seen 2026-05-14 · Last seen 2026-05-14 · ok HTTP/1.1 200 342 ms crawled 2026-05-14

DE · 104.102.18.84 · AS16625 Akamai Technologies, Inc.

Reputation 100/100

sector government type homepage

HTML metadata

Title: Home - Centers for Medicare & Medicaid Services | CMS
Language: en
Generator: Drupal 11 (https://www.drupal.org)
Canonical: https://www.cms.gov/

Technology

CMS: Drupal

Third-party hosts loaded (3)

www.cms.gov×19
design.cms.gov×3
tealium-tags.cms.gov×1

Social

Registration

Registrar

get.gov

Created

2001-06-20

Expires

2026-09-15 118 days left

Updated

2025-09-20

Name servers

a1-86.akam.net
a10-67.akam.net
a13-64.akam.net
a24-65.akam.net
a3-66.akam.net
a8-67.akam.net

DNS records live

NS

a1-86.akam.net
a10-67.akam.net
a13-64.akam.net
a24-65.akam.net
a3-66.akam.net
a8-67.akam.net

MX

10 primary.us.etp.fireeyegov.com
20 alt1.us.etp.fireeyegov.com
30 alt2.us.etp.fireeyegov.com
40 alt3.us.etp.fireeyegov.com

TXT

Show 8 TXT records

_qm4av6bzsp5uujahwa11fsttdhvxzv9
identrust_validate=JDXQyrvdi4u4csBVW53QJrn58NGFNML/YX9w8UtRx3WF
G7+0noMBL6fSl8UVSBtZmj35+02tBOTulPKWucrYjkLJFMZz21/GxFxVzTMDYCjNXRIdENxZHifEHLds5FEU4A==
identrust_validate=t41124Xnt5NJgr+E8ne/qqL2LpycASgSenCxnQdzssO4
ed5vo0xgnd
identrust_validate=3RmnW/hkqKXUGdB9rQVSUxgwI6kLD3XsbHJh0jZyq2n/
ciscocidomainverification=f1d51662d07e32cdf508fe2103f9060ac5ba2f9efeaa79274003d12d0a9a745
identrust_validate=UUQCTX9hak2EePyL9SYBOliViCCAiRhPmlyycwfCy/o8

Verified for

Cisco Webex
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:15.200.33.0/24 ip4:15.200.32.0/24 ip4:63.88.93.240/28 ip4:158.72.139.19 ip4:158.72.139.19 ip4:146.123.140.0/26 ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:104.152.72.100 ip4:158.70.144.146 ip4:65.213.206.111 ip4:65.213.206.112 ip4:65.213.206.113 ip4:208.250.57.111 ip4:208.250.57.112 ip4:208.250.57.113 include:_spf.google.com include:spf.protection.outlook.com include:mail.sandbox2.idp.idm.cms.gov include:_spf.qemailserver.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:8idhoybh@ag.us.dmarcian.com, mailto:reports@dmarc.cyber.dhs.gov; ruf=mailto:8idhoybh@fr.us.dmarcian.com;

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10onRtcr4fuQkEGZIv4Z4PtVzt6YMERqtRmQLt/Zk4xDwtkQp1vbkaeJx2mPi578GaZILVTE90azyu3tgF…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMqoajmV2q5kI7/WoBoEo+Q1zCq8CFrtAC6a56YVYKM8ZapuSvOyk1voB0jpW7zzEbXMNO5G9vbmNtO2E2…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-05-01 to 2026-07-29

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.cms.gov/

present

strict-transport-security
x-frame-options
x-content-type-options

findings

missing Content Security Policy
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload