carnegieendowment.org

Observed Jul 18, 2026, 12:10 UTC (9h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onAmazon

Email byMicrosoft 365

Secured byAmazon

Also usesGoogle Search Console

non_profit

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat carnegieendowment.org actually stands on - every host below is a signed observation

carnegieendowment.org

A / AAAA

13.226.209.11713.226.209.10413.226.209.12413.226.209.38

Amazonserves the site

ns-1308.awsdns-35.orgns-782.awsdns-33.net

awsdns-35.org + awsdns-33.netanswers its DNS

ceip-org.mail.protection.outlook.com

Microsoft 365receives its email

TLS

carnegieendowment.org

Amazonissued its certificate

DNS Records

A 4

13.226.209.117
13.226.209.104
13.226.209.124
13.226.209.38

MX 1

0ceip-org.mail.protection.outlook.com

TXT 4

globalsign-domain-verification=9e951de685c8b2af63529821752dc106
google-site-verification=ReLwjMc51AmeoDJm8Q_J0cApiOukyapbxsbM_XmoxYM
v=spf1 a:vpn.ceip.org mx include:mktomail.com include:amazonses.com include:spf.protection.outlook.com include:spf.exclaimer.net -all
v=DMARC1;p=reject;ruf=mailto:carnegieendowmentforinternationalpeace@us.cp-dmarc.com;rua=mailto:ceipdmarc@ceip.org,mailto:carnegieendowmentforinternationalpeace@us.cp-dmarc.com;

NS 2

ns-1308.awsdns-35.org
ns-782.awsdns-33.net

SOA 1

ns-782.awsdns-33.net awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common Name	Issuer	Expires
`carnegieendowment.org`	C=US, O=Amazon, CN=Amazon RSA 2048 M04	Fri, 01 Jan 2027 23:59:59 +0000
`Amazon RSA 2048 M04`	C=US, O=Amazon, CN=Amazon Root CA 1	Fri, 23 Aug 2030 22:26:35 +0000
`Amazon Root CA 1`	C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2	Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for carnegieendowment.org. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/carnegieendowment.org">
  <img src="https://domaindrift.io/badge/carnegieendowment.org.svg"
       width="300" height="64" alt="DomainDrift signed observations for carnegieendowment.org">
</a>

Ed25519 Receipt

Receipt ID: 0ef9cf9d-611e-4c97-b032-e1ecd2d7feda
Output Hash: d4c56c07302270768ce3aad5db3f7baa88fd2750f2e54776f433f5eb25296dee
Signature: ed25519:1d9b86258fa46676df466d6d54c71949a07c6895f60176d75a954a41637abd8b8daaa55b4d7231aba849d278095dd49f8f3cfd6dcc29dd24150756786e5fc601
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/carnegieendowment.org