CONTINUOUS INTERNET TELEMETRY24H DRIFT3,860 material changesacross 3,413 domains · last 24h · -6,555 vs yesterdayDNS DRIFT210 domains changed DNS providertop destination cloudflare.com · -449 vs yesterdayEMAIL DRIFT36 domains switched email providertop destination google.com · -131 vs yesterdayCERT DRIFT47 domains switched issuing CA24h · -172 vs yesterdayNOW498 curated domains not reachable-205 vs yesterdaySITE ERRORS17,249 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 98,083 sites429 rate-limit / 403 bot-block, a posture signal

ardot.gov

Observed Jul 23, 2026, 04:51 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byMailchimp
Secured bySectigo
IPv6 · 1 subdomain · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ardot.gov actually stands on - every host below is a signed observation
ardot.gov
A / AAAA
104.18.21.114104.18.20.1142606:4700::6812:14722606:4700::6812:1572
Cloudflareserves the site
NS
blue.foundationdns.comblue.foundationdns.netblue.foundationdns.org
foundationdns.com + foundationdns.net + moreanswers its DNS
MX
mx1.hc5209-46.iphmx.commx2.hc5209-46.iphmx.com
Mailchimpreceives its email
TLS
ardot.gov
Sectigo Limitedissued its certificate

DNS Records

A 2

  • 104.18.21.114
  • 104.18.20.114

AAAA 2

  • 2606:4700::6812:1472
  • 2606:4700::6812:1572

MX 2

  • 10mx1.hc5209-46.iphmx.com
  • 15mx2.hc5209-46.iphmx.com

TXT 9

  • 8tzc8/+xShViWsH+dqw/f8/yCkWhg+JPE+XDh2qfc7wIEv62bH3HRI+ne0rUh9kVTSk84NxUCKlz+6YwU19VYg==
  • MS=ms38987627
  • Yg3ZnjScR95UPFjmyBpQqm8lnA7zAK5qPzygQwYThbJhdSpjrXs0bdGy1y5ZUZ8+UDBn2nr0+x8XpaHP2WDtKQ==
  • adobe-idp-site-verification=97437bc3c9cd0950641e55368c172c02bdbb096bdb882d86d9916b0d3f943604
  • apple-domain-verification=NzwcMTRNwblmUUW5
  • cisco-ci-domain-verification=15815986a51c5e485b9a4aa0b19577579d394e43f1c6ca2c85b39baebbb37306
  • intersight=2ce6749c332af86dcfda9caec011936e9776233a9e708b12e03bf19007e975b4
  • v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net include:spf_c.oraclecloud.com include:_spf.ultipro.com include:_spf.ardot.gov ip4:3.14.120.227 include:_ppl.ardot.gov include:_spf.psm.knowbe4.com ~all
  • v=DMARC1; p=quarantine; rua=mailto:dmarcreports@ardot.gov; ruf=mailto:dmarcforensics@ardot.gov; fo=1

NS 3

  • blue.foundationdns.com
  • blue.foundationdns.net
  • blue.foundationdns.org

SOA 1

  • blue.foundationdns.com dns.cloudflare.com

SRV 2

  • expe-01.ardot.gov:5060 p10
  • expe-01.ardot.gov:5061 p10

TLS Certificates (2)

Common NameIssuerExpires
ardot.gov C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36 Tue, 22 Sep 2026 23:59:59 +0000
Sectigo Public Server Authentication CA OV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ardot.gov. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ardot.gov <a href="https://domaindrift.io/t/ardot.gov"> <img src="https://domaindrift.io/badge/ardot.gov.svg" width="300" height="64" alt="DomainDrift signed observations for ardot.gov"> </a>

Ed25519 Receipt

Receipt ID
rcpt_9c8092e0a9f8860d
Output Hash
a564f791876621608ba532c1763960a2129de0461f7d2be06371fe74761ebfeb
Signature
ed25519:c11d01369a1a8d1d7a5de0458bb2185281daf39c84bb8a772cce7a3a91d55f7ebbfde3b4478bb7e76a75dca55b1be9178ee2ba201aa850dcb13183fb0760d809
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser