vermont.gov

.gov user

First seen 2026-05-16 · Last seen 2026-05-16 · ok HTTP/1.1 200 821 ms crawled 2026-05-16

US · 199.107.32.183 · AS394572 Tyler Technologies, Inc.

Reputation 94/100 dmarc monitor-only

sector government type homepage

HTML metadata

Title: Home | Vermont.gov
Language: en
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.vermont.gov/

Technology

CDN: Amazon CloudFront
Server: nginx
CMS: Drupal

Analytics

Google Tag Manager

Fonts

Font Awesome

Third-party hosts loaded (4)

www.vermont.gov×67
use.fontawesome.com×3
www.googletagmanager.com×2
translate.google.com×1

Social

Registration

Registrar

get.gov

Created

2001-07-30

Expires

2026-08-11 84 days left

Updated

2025-08-16

Name servers

ns1.f5clouddns.com
ns2.f5clouddns.com

DNS records live

NS

ns1.f5clouddns.com
ns2.f5clouddns.com

MX

10 vermont-gov.mail.protection.outlook.com

TXT

Show 27 TXT records

F41A7FC79068DC2DD7F7686BF58887AA173E9B890177777AF71550CD0B4927F3
_globalsign-domain-verification=wFsj4Kc2wD4vVBiqbzT2ls_I-WuE16kNlC_b77gjHy
docusign=ead83d79-8806-4d6d-855f-3df86633a0c7
s8nqgr3e3g9r00279t0svmquqe
wrike-verification=NjI1NzY1ODozMjIwMWI5NzdkZDQ0ZWQ4MzgxMzYyYjYwNzE4ZDBjMmMyNDZjMWQ4Y2U5ZjI3OGI3NzY4OGM0MjM4M2MyMWM1
google-site-verification=ckgHE-3N1t3sVfYEmWuVQLN7bKJZrAkTcgImQuhoDQQ
google-site-verification=owVp35akPa0awk7ixQ3-mgIGWOAr0iK4QhxAR3MJUNE
tedmdhpq7vj085589v9bgg69at
6creq1cm2ssj9275vrn9a6p5eb
MS=ms65455399
ZzrWnEGJ6y2XBlvIz5uEil0TDTm2j6mhU2faF/s75uY=
qgubti5ja6rj3nq10feg0l8j19
ssrggort8jcu8h24duudojhond
docusign=f9857486-48f2-4d99-bc38-2229a93744e7
zrzYGWGwHWYfFZ+RfcE9SoFoHKv2l6ioyRzsHGceIAlmHWtDPhoIB10xmrVGWSeGw99hnjDf0Ksyzj3qPl7RLQ==
o0YoMzLbEClFc/A7+dZAeLTLYey1ILxkZtZDYvF7thU=
bRzQ+cmsPtUo9agtLg6rfHNzGpgtxCg+fPIsBgQIBHs=
f2kca52jhj2oiib5q049qu77k
paloaltonetworks-site-verification=f52d0ab8c7de5692d85cfbe0002d5fb9334be47281443112e1de6722334cdf5a
google-site-verification=I69Wx7YuXh_tp9n0jix5zIUj4DoOriPuiHDAGF6VHgA
8m93g63b8e366v5gu479kvol51
P9wd1pAFUhqx5FAcg60eNwPDQS8AdNw9aRF9P49gIYY=
globalsign-domain-verification=2EA4E5D6B8D85A86DFD870D4D9650E19
Ox/roeqf9DqWoNlVGAV5D+RdJM2d9bJe14dFsDSLDsI=
google-gws-recovery-domain-verification=58530958
google-site-verification=ckgHE-3N1t3sVfYEmWuVQLN7bKJZrAkTcglmQuhoDQQ
vmware-cloud-verification-fe481b46-1bda-41fd-b5e4-db613ab16922

Email authentication partial

SPF

v=spf1 ip4:52.227.25.43 ip4:216.243.148.66 ip4:159.105.0.0/16 ip4:170.222.64.128/25 ip4:65.74.169.93 ip4:209.190.248.160/28 ip4:206.16.212.235 ip4:198.203.175.175 ip4:198.203.177.177 ip4:198.203.181.181 ip4:170.222.100.210 ip4:139.78.133.4 ip4:174.143.220.71 ip4:174.143.220.67 ip4:174.143.220.68 ip4:204.232.151.16 ip4:204.232.137.215 ip4:204.232.137.216 ip4:50.31.156.96/27 ip4:104.245.209.192/26 ip4:50.31.205.0/24 ip4:66.77.69.0/24 ip4:66.77.73.0/24 a:appriss.com include:spf.egov.com include:globalnotifications.com include:spf.protection.outlook.com include:spf.outreachsystems.com include:_spf.salesforce.com include:acadisonline.com -all

strict (-all)

DMARC

v=DMARC1; p=none; sp=none; adkim=r; fo=1; ri=86400; rua=mailto:ADS.SecurityDMARC@vermont.gov; ruf=mailto:ADS.SecurityDMARC@vermont.gov

policy: none (monitoring only) · sp=none

DKIM

selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCiM3NBlBZCxp3IzJWQ7u6jXgFl8kEx3sctJxYxqv/3xNDKjumgz+WV8lN0smf6vFSdA7MMbZija+SeitQXkB…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi1JWpvJzv6piNRHW6LJ9PnI4fFf4gK2ICjUYJCNHoDGMxU/sVjyI0KPa7yuylnVUf+Rk9XWFfcopzkGox…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOdW9tBdL+GTrjT+A0Rl4vioa0bZ6TI9oYLhMhBXH9aUsEBSjUx7bFB3SS19Avg3LSX0qgbpaBWNkhvVXtGyT9FP…

selectors probed

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2026-04-07 to 2026-10-23

Expires in 158 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.vermont.gov/

present

x-frame-options
x-content-type-options

findings

missing HSTS
missing Content Security Policy
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff