CONTINUOUS INTERNET TELEMETRY24H DRIFT6,326 material changesacross 6,044 domains · +5,417 vs yesterdayDNS DRIFT391 domains changed DNS providertop destination parity.domains · +365 vs yesterdayEMAIL DRIFT84 domains switched email providertop destination google.com · +76 vs yesterdayCERT DRIFT150 domains switched issuing CA24h · +127 vs yesterdayNOW1,895 curated domains not answering-815 vs yesterdayERRORS21,156 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED92,508 throttled or blocked our scanner429 rate-limit / 403 bot-block

denvergov.org

Observed Jul 21, 2026, 19:18 UTC (17h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCITY AND COUNTY OF DENVER
Email byProofpoint
Secured bySectigo
Registered withNetwork Solutions, LLC
Also usesDockerDocuSignFacebook/MetaGoogle Search Console
24 subdomains · government_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat denvergov.org actually stands on - every host below is a signed observation
denvergov.org
A / AAAA
169.133.10.100
CITY AND COUNTY OF DENVERserves the site
NS
ns-1533.awsdns-63.orgns-1950.awsdns-51.co.ukns-257.awsdns-32.comns-713.awsdns-25.net
awsdns-63.org + awsdns-51.co.uk + moreanswers its DNS
MX
mxa-00322801.gslb.pphosted.commxb-00322801.gslb.pphosted.com
Proofpointreceives its email
TLS
www.denvergov.org
Sectigo Limitedissued its certificate

DNS Records

A 1

  • 169.133.10.100

MX 2

  • 0mxa-00322801.gslb.pphosted.com
  • 0mxb-00322801.gslb.pphosted.com

TXT 26

  • D8Y+R9rCi0KFzl+rUc3Oy3jTjfrsG48QciAYVy1YDqL8ppC0WIFqLZxXkf7X8dpfzKS9VVY+d9D+4mVjTPtncg==
  • Dynatrace-site-verification=5586802f-ae9a-4189-9f74-86655bea9a20__hmu125cfuv1op2ognk0qq03nf
  • MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKPMXo4zN9mLKtAPYrJSoY5n3S1S063K+r5jgD0Dvww7PE76XVJIdC9gJLivHudS1PxXAoGeJpbpX/6cwnj1NFpXfdCipqEOidTnyZmpCuHlcV/JX/Y20e3FDyHMj7k4xzgTNeNbodghCShWNN2Omu+29dTdNsUHBvvwjTm/Cw1QIDAQAB
  • _betterimpact-rewrite-sender
  • _pki-validation.denvergov.org=DC57-5B6B-1A0E-15E6-8824-5C76-E16A-BDB8
  • adobe-idp-site-verification=bfbc71bf04e8eac80ae7d461950fe8259369e2830054795144cd6618d2dbb5ff
  • airtable-verification=2b72497adb278ec25e93a969a6a170bf
  • asv=e7a7b450cbba4b824193360ec44e9a22
  • bf47c0f7-a0f4-4a44-b1c9-169abd33e7ca
  • box-domain-verification=73673031c14f1be09492c0a5152059beba14bf14ed62ca2f3f68d2b1ad21f4ce

NS 4

  • ns-1533.awsdns-63.org
  • ns-1950.awsdns-51.co.uk
  • ns-257.awsdns-32.com
  • ns-713.awsdns-25.net

SOA 1

  • ns-1533.awsdns-63.org awsdns-hostmaster.amazon.com

SRV 3

  • gal-expressway-e.denvergov.org:5060 p5
  • gal-expressway-e.denvergov.org:5061 p5
  • gal-expressway-e.denvergov.org:5062 p5

CAA 6

  • iodef "mailto:Hostmaster@denvergov.org"
  • issue "entrust.net"
  • issue "pki.goog; cansignhttpexchanges=yes"
  • issue "sectigo.com"
  • issuewild "entrust.net"
  • issuewild "sectigo.com"

TLS Certificates (4)

Common NameIssuerExpires
www.denvergov.org C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36 Fri, 13 Nov 2026 23:59:59 +0000
Sectigo Public Server Authentication CA OV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000
USERTrust RSA Certification Authority C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (24)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for denvergov.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for denvergov.org <a href="https://domaindrift.io/t/denvergov.org"> <img src="https://domaindrift.io/badge/denvergov.org.svg" width="300" height="64" alt="DomainDrift signed observations for denvergov.org"> </a>

Ed25519 Receipt

Receipt ID
rcpt_2613b27eff6c594c
Output Hash
b3fe349b2bdf01885a49a7934512a070f2a4d1f3f0ac21884dc1f4881e4abf66
Signature
ed25519:f6852ee5251781fd2caf562aee0773b83df0d749b2b09f4629e442545d1d0887fe2cec9a0ecf7e56c38dc2079951dd9bf7050d5d1c9b20eaabe6b5cafd18c30c
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser