CONTINUOUS INTERNET TELEMETRY24H DRIFT269 material changesacross 160 domains · +123 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination ns2 · +1 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,714 curated domains not answering+380 vs yesterdayERRORS30,533 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,601 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brNo nameservers in the latest observation24H DRIFT269 material changesacross 160 domains · +123 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination ns2 · +1 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,714 curated domains not answering+380 vs yesterdayERRORS30,533 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,601 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brNo nameservers in the latest observation

huduser.gov

Observed Jul 18, 2026, 13:34 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onAmazon
Email byGoogle Workspace
Secured byGoDaddy.com
Registered withget.gov
Also usesGoogle Search Console
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat huduser.gov actually stands on - every host below is a signed observation
huduser.gov
A / AAAA
99.83.149.39
Amazonserves the site
NS
ns-232.awsdns-29.comns-658.awsdns-18.netns-1326.awsdns-37.orgns-1661.awsdns-15.co.uk
awsdns-29.com + awsdns-18.net + moreanswers its DNS
MX
aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
*.huduser.gov
GoDaddy.comissued its certificate

DNS Records

A 1

  • 99.83.149.39

MX 5

  • 10aspmx.l.google.com
  • 20alt1.aspmx.l.google.com
  • 20alt2.aspmx.l.google.com
  • 50alt3.aspmx.l.google.com
  • 50alt4.aspmx.l.google.com

TXT 4

  • google-site-verification=VZxd-qQsQS405iFYUNGnl7VOJxRuIo3D_e7rqSKVpuI
  • spf2.0/pra include:spf.constantcontact.com include:_spf.google.com ~all
  • v=spf1 mx ip4:96.127.43.83/32 ip4:96.127.68.27/32 ip4:96.127.46.139/32 ip4:173.0.84.225/32 ip4:173.0.84.226/32 ip4:173.0.84.227/32 ip4:173.0.84.228/32 ip4:66.211.168.230/32 ip4:66.211.168.231/32 include:_spf.google.com ~all
  • v=DMARC1; p=reject; sp=reject; fo=1; rua=mailto:mailauth-reports@huduser.gov,mailto:reports@dmarc.cyber.dhs.gov; ruf=mailto:mailauth-reports@huduser.gov

NS 4

  • ns-232.awsdns-29.com
  • ns-658.awsdns-18.net
  • ns-1326.awsdns-37.org
  • ns-1661.awsdns-15.co.uk

SOA 1

  • ns-658.awsdns-18.net awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common NameIssuerExpires
*.huduser.gov C=US, O=GoDaddy.com, CN=GoDaddy TLS Intermediate CA DV - R1v1 Wed, 27 Jan 2027 00:37:34 +0000
GoDaddy TLS Intermediate CA DV - R1v1 C=US, O=GoDaddy.com, CN=GoDaddy TLS Root CA - R1 Fri, 24 Aug 2040 11:59:59 +0000
GoDaddy TLS Root CA - R1 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2 Thu, 31 Dec 2037 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for huduser.gov. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for huduser.gov <a href="https://domaindrift.io/t/huduser.gov"> <img src="https://domaindrift.io/badge/huduser.gov.svg" width="300" height="64" alt="DomainDrift signed observations for huduser.gov"> </a>

Ed25519 Receipt

Receipt ID
2dc894fe-b949-47e9-8dc9-c9d59817eaa5
Output Hash
c3129d8fcf66c836a858e64c3bd64df9dc01558a54a6b4b65e5ebe04dd7b3b0b
Signature
ed25519:bedf6e77c0da37e5409e81f06cd402e2f55414cc084b9ec6071e58276ef672914e9af8e87a205bf705057b99f535fd3a60bddd9fafa781494950835989568304
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser