Domain
cms.gov
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of cms.gov
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
104.102.18.84, 104.85.50.85, 184.30.128.77, 2.17.181.77, 23.194.209.76, 23.222.64.83, 23.32.41.83
AAAA
2a02:26f0:1180:683::28a, 2a02:26f0:1180:69e::28a, 2a02:26f0:1700:384::28a, 2a02:26f0:1700:38c::28a, 2a02:26f0:2780:b94::28a, 2a02:26f0:2780:b97::28a, 2a02:26f0:3500:580::28a, 2a02:26f0:3500:590::28a
MX
10 primary.us.etp.fireeyegov.com, 20 alt1.us.etp.fireeyegov.com, 30 alt2.us.etp.fireeyegov.com, 40 alt3.us.etp.fireeyegov.com
NS
a1-86.akam.net, a10-67.akam.net, a13-64.akam.net, a24-65.akam.net, a3-66.akam.net, a8-67.akam.net
TXT
G7+0noMBL6fSl8UVSBtZmj35+02tBOTulPKWucrYjkLJFMZz21/GxFxVzTMDYCjNXRIdENxZHifEHLds5FEU4A==, MS=ms27639832, MS=ms59622794, _qm4av6bzsp5uujahwa11fsttdhvxzv9, ciscocidomainverification=f1d51662d07e32cdf508fe2103f9060ac5ba2f9efeaa79274003d12d0a9a745, ed5vo0xgnd, google-site-verification=MdcB5nKEy-LwlvUBhBoh3YTH01HW1OZNszN9b-C4HV8, google-site-verification=sMIzpCg2oaPmasINAKfMmE9mOmdZRxL0myxnvSlIUOk
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
6e616acc3b5d0d09…
google · argon2026h2
Subject: UCCXN1.cms.gov
Issuer: GeoTrust TLS RSA CA G1
SANs: UCCXN1.cms.gov, cms.gov
Valid: 2025-08-13 00:00:00 → 2026-08-19 23:59:59
6f8d085f1572f6fa…
google · argon2026h2
Subject: UCCXN2.cms.gov
Issuer: GeoTrust TLS RSA CA G1
SANs: UCCXN2.cms.gov, cms.gov
Valid: 2025-08-13 00:00:00 → 2026-08-19 23:59:59
e52775cae20c4049…
google · argon2026h2
Subject: labcuc.cms.gov
Issuer: GeoTrust TLS RSA CA G1
SANs: labcuc.cms.gov, cms.gov
Valid: 2025-08-13 00:00:00 → 2026-08-14 23:59:59
063e4e4ccbb02881…
cloudflare · nimbus2026
Subject: www.cms.gov
Issuer: GeoTrust TLS RSA CA G1
SANs: www.cms.gov, accounts.cms.gov, assisters.cms.gov, auth365.cerrs.cms.gov, cerrs-edt.cms.gov, cerrs-mcr.cms.gov, cerrs-sp.cms.gov, cerrs-sts.cms.gov, cerrs-tb.cms.gov, cerrs365dws.cerrs.cms.gov, cerrsd365-sts.cerrs.cms.gov, cerrsd365.cerrs.cms.gov, cerrsd365training.cerrs.cms.gov, cerrsdws.cerrs.cms.gov, cerrsngtraining.cerrs.cms.gov, cms.gov, cms.hhs.gov, data.cms.gov, design.cms.gov, download.cms.gov, edit.cms.gov, edit.data.cms.gov, edit.pdc.cms.gov, es.cms.gov, hics.cms.gov, hios.cms.gov, innovation.cms.gov, innovations.cms.gov, marketplace.cms.gov, mo-idp.cms.gov, nsa-idr.cms.gov, partnershipforpatients.cms.gov, qpp.cms.gov, qualitypaymentprogram.cms.gov, seed.cms.gov, tableau.gc.bi.cms.gov, www.assisters.cms.gov, www.cms.hhs.gov, www.innovation.cms.gov, www.innovations.cms.gov, www.nsa-idr.cms.gov, www.qpp.cms.gov, www.qualitypaymentprogram.cms.gov, zone.cms.gov
Valid: 2025-07-27 00:00:00 → 2026-07-28 23:59:59
ccbaccfffad11274…
cloudflare · nimbus2026
Subject: www.cms.gov
Issuer: GeoTrust TLS RSA CA G1
SANs: www.cms.gov, accounts.cms.gov, assisters.cms.gov, auth365.cerrs.cms.gov, cerrs-edt.cms.gov, cerrs-mcr.cms.gov, cerrs-sp.cms.gov, cerrs-sts.cms.gov, cerrs-tb.cms.gov, cerrs365dws.cerrs.cms.gov, cerrsd365-sts.cerrs.cms.gov, cerrsd365.cerrs.cms.gov, cerrsd365training.cerrs.cms.gov, cerrsdws.cerrs.cms.gov, cerrsngtraining.cerrs.cms.gov, cms.gov, cms.hhs.gov, data.cms.gov, design.cms.gov, download.cms.gov, edit.cms.gov, edit.data.cms.gov, edit.pdc.cms.gov, es.cms.gov, hics.cms.gov, hios.cms.gov, innovation.cms.gov, innovations.cms.gov, marketplace.cms.gov, mo-idp.cms.gov, nsa-idr.cms.gov, partnershipforpatients.cms.gov, qpp.cms.gov, qualitypaymentprogram.cms.gov, seed.cms.gov, tableau.gc.bi.cms.gov, www.assisters.cms.gov, www.cms.hhs.gov, www.innovation.cms.gov, www.innovations.cms.gov, www.nsa-idr.cms.gov, www.qpp.cms.gov, www.qualitypaymentprogram.cms.gov, zone.cms.gov
Valid: 2025-07-27 00:00:00 → 2026-07-28 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | a3-66.akam.net | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | webexdomainverification.3MUDJ=0d5d8346-7f34-4cc3-84c1-28f4eb80829f | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | webexdomainverification.KR4G=d2e70405-10af-4863-bc64-388ca30ea4d4 | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| NS | a24-65.akam.net | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | webexdomainverification.KR4B=358c3255-c680-4387-b8f3-38a73619240e | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| SRV | _sips._tcp 10 10 5062 cospkexpe01.cms.gov | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | _qm4av6bzsp5uujahwa11fsttdhvxzv9 | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| A | 104.102.18.84 | 2026-05-26 11:48:19.863 | 2026-07-24 18:20:45.158 |
| MX | 10 primary.us.etp.fireeyegov.com | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | identrust_validate=JDXQyrvdi4u4csBVW53QJrn58NGFNML/YX9w8UtRx3WF | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| SRV | _sip._tcp 10 10 5060 cospkexpe02.cms.gov | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | v=spf1 ip4:15.200.33.0/24 ip4:15.200.32.0/24 ip4:63.88.93.240/28 ip4:158.72.139.19 ip4:158.72.139.19 ip4:146.123.140.0/26 ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:104.152.72.100 ip4:158.70.144.146 ip4:65.213.206.111 ip4:65.213.206.112 ip4:65.213.206.113 ip4:208.250.57.111 ip4:208.250.57.112 ip4:208.250.57.113 include:_spf.google.com include:spf.protection.outlook.com include:mail.sandbox2.idp.idm.cms.gov include:_spf.qemailserver.com -all | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| NS | a8-67.akam.net | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | google-site-verification=yuNrclUiclwAtByggN3Jae8WgxDsb6CjtRpPD-EPjXY | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| AAAA | 2a02:26f0:480:179b::28a | 2026-05-26 11:48:19.863 | 2026-06-02 16:48:49.896 |
| TXT | google-site-verification=MdcB5nKEy-LwlvUBhBoh3YTH01HW1OZNszN9b-C4HV8 | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| MX | 20 alt1.us.etp.fireeyegov.com | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | webexdomainverification.KR41=b9eafa45-e96e-4b68-a167-4740e31ccd75 | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | ciscocidomainverification=f1d51662d07e32cdf508fe2103f9060ac5ba2f9efeaa79274003d12d0a9a745 | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | ed5vo0xgnd | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | identrust_validate=3RmnW/hkqKXUGdB9rQVSUxgwI6kLD3XsbHJh0jZyq2n/ | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| AAAA | 2a02:26f0:480:1787::28a | 2026-05-26 11:48:19.863 | 2026-06-02 16:48:49.896 |
| NS | a10-67.akam.net | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | identrust_validate=UUQCTX9hak2EePyL9SYBOliViCCAiRhPmlyycwfCy/o8 | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | G7+0noMBL6fSl8UVSBtZmj35+02tBOTulPKWucrYjkLJFMZz21/GxFxVzTMDYCjNXRIdENxZHifEHLds5FEU4A== | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | google-site-verification=sMIzpCg2oaPmasINAKfMmE9mOmdZRxL0myxnvSlIUOk | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| MX | 30 alt2.us.etp.fireeyegov.com | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| MX | 40 alt3.us.etp.fireeyegov.com | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | identrust_validate=t41124Xnt5NJgr+E8ne/qqL2LpycASgSenCxnQdzssO4 | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| SRV | _sips._tcp 10 10 5062 cospkexpe02.cms.gov | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | MS=ms27639832 | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | webexdomainverification.3MUBG=00360c1a-741f-4d9f-983a-55d0a63cdc92 | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | webexdomainverification.KR46=1f876bb9-300d-49ad-bf2b-74b544bc5efa | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| NS | a13-64.akam.net | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| SRV | _sip._tcp 10 10 5060 cospkexpe01.cms.gov | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| NS | a1-86.akam.net | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| TXT | MS=ms59622794 | 2026-05-26 11:48:19.863 | 2026-08-01 22:29:37.405 |
| A | 23.194.209.76 | 2026-06-01 02:51:17.686 | 2026-07-27 05:00:22.431 |
| AAAA | 2a02:26f0:fe00:1bc::28a | 2026-06-02 03:45:33.953 | 2026-06-04 11:16:57.590 |
| AAAA | 2a02:26f0:fe00:1ab::28a | 2026-06-02 03:45:33.953 | 2026-06-04 11:16:57.590 |
| A | 23.222.64.83 | 2026-06-04 11:14:06.359 | 2026-06-04 11:14:06.359 |
| AAAA | 2a02:26f0:1180:683::28a | 2026-06-04 11:14:06.359 | 2026-07-17 01:46:02.721 |
| AAAA | 2a02:26f0:1180:69e::28a | 2026-06-04 11:14:06.359 | 2026-07-17 01:46:02.721 |
| A | 184.30.128.77 | 2026-06-04 11:16:57.590 | 2026-07-16 18:14:05.175 |
| AAAA | 2a02:26f0:1700:38c::28a | 2026-06-18 02:36:11.127 | 2026-06-18 02:36:11.127 |
| AAAA | 2a02:26f0:1700:384::28a | 2026-06-18 02:36:11.127 | 2026-06-18 02:36:11.127 |
| AAAA | 2a02:26f0:2780:b94::28a | 2026-06-18 02:39:25.643 | 2026-06-18 02:39:25.643 |
| AAAA | 2a02:26f0:2780:b97::28a | 2026-06-18 02:39:25.643 | 2026-06-18 02:39:25.643 |
| AAAA | 2a02:26f0:3500:590::28a | 2026-06-26 00:21:10.115 | 2026-07-25 04:34:47.921 |
| AAAA | 2a02:26f0:3500:580::28a | 2026-06-26 00:21:10.115 | 2026-07-25 04:34:47.921 |
| AAAA | 2a02:26f0:6d00:c90::28a | 2026-07-16 18:14:05.175 | 2026-07-27 05:00:22.431 |
| AAAA | 2a02:26f0:6d00:c85::28a | 2026-07-16 18:14:05.175 | 2026-07-27 05:00:22.431 |
| A | 23.32.41.83 | 2026-07-17 01:46:02.721 | 2026-07-17 01:46:02.721 |
| AAAA | 2a02:26f0:680:4a3::28a | 2026-07-20 04:37:44.328 | 2026-08-01 22:29:37.405 |
| A | 104.85.50.85 | 2026-07-20 04:37:44.328 | 2026-08-01 22:29:37.405 |
| AAAA | 2a02:26f0:680:483::28a | 2026-07-20 04:37:44.328 | 2026-08-01 22:29:37.405 |
| A | 2.17.181.77 | 2026-07-25 04:34:47.921 | 2026-07-25 04:34:47.921 |