cms.gov

Observed Jul 21, 2026, 19:16 UTC (19h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onAkamai Technologies

Email byGoogle (SPF sender)

Secured byDigiCert

Registered withget.gov

Also usesGoogle Search Console

IPv6 · 40 subdomains · government_expanded

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat cms.gov actually stands on - every host below is a signed observation

cms.gov

A / AAAA

23.204.193.802600:1408:ec00:985::28a2600:1408:ec00:992::28a

Akamai Technologiesserves the site

a1-86.akam.neta3-66.akam.neta8-67.akam.neta10-67.akam.net+2 more

akam.netanswers its DNS

primary.us.etp.fireeyegov.comalt1.us.etp.fireeyegov.comalt2.us.etp.fireeyegov.comalt3.us.etp.fireeyegov.com

Google (SPF sender)receives its email

TLS

www.cms.gov

DigiCert Incissued its certificate

DNS Records

A 1

23.204.193.80

AAAA 2

2600:1408:ec00:985::28a
2600:1408:ec00:992::28a

MX 4

10primary.us.etp.fireeyegov.com
20alt1.us.etp.fireeyegov.com
30alt2.us.etp.fireeyegov.com
40alt3.us.etp.fireeyegov.com

TXT 21

ed5vo0xgnd
MS=ms27639832
MS=ms59622794
_qm4av6bzsp5uujahwa11fsttdhvxzv9
identrust_validate=3RmnW/hkqKXUGdB9rQVSUxgwI6kLD3XsbHJh0jZyq2n/
identrust_validate=JDXQyrvdi4u4csBVW53QJrn58NGFNML/YX9w8UtRx3WF
identrust_validate=UUQCTX9hak2EePyL9SYBOliViCCAiRhPmlyycwfCy/o8
identrust_validate=t41124Xnt5NJgr+E8ne/qqL2LpycASgSenCxnQdzssO4
webexdomainverification.KR41=b9eafa45-e96e-4b68-a167-4740e31ccd75
webexdomainverification.KR46=1f876bb9-300d-49ad-bf2b-74b544bc5efa

NS 6

a1-86.akam.net
a3-66.akam.net
a8-67.akam.net
a10-67.akam.net
a13-64.akam.net
a24-65.akam.net

SOA 1

usw2.akam.net hostmaster.akamai.com

SRV 4

cospkexpe01.cms.gov:5060 p10
cospkexpe02.cms.gov:5060 p10
cospkexpe01.cms.gov:5062 p10
cospkexpe02.cms.gov:5062 p10

TLS Certificates (2)

Common Name	Issuer	Expires
`www.cms.gov`	C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=GeoTrust TLS RSA CA G1	Mon, 14 Dec 2026 23:59:59 +0000
`GeoTrust TLS RSA CA G1`	C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2	Tue, 02 Nov 2027 12:23:37 +0000

Subdomains (40)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cms.gov. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/cms.gov">
  <img src="https://domaindrift.io/badge/cms.gov.svg"
       width="300" height="64" alt="DomainDrift signed observations for cms.gov">
</a>

Ed25519 Receipt

Receipt ID: rcpt_094299465fca1567
Output Hash: bf9becaa30110e01fda585b671aa4c6dd25be68c6770bd4dd1964bb002a728e4
Signature: ed25519:3a963df1b4fd0fc7735ae702d9b264ebc5c17ef2039a1fed553987717722d691706f49d1bf56e039c67de2dcbdd5a5ff605f0550fd37507cf76ecbc2758a0e09
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/cms.gov