CONTINUOUS INTERNET TELEMETRY24H DRIFT3,607 material changesacross 3,126 domains · +209 vs yesterdayDNS DRIFT26 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -1 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination sendgw.comCERT DRIFT9 domains switched issuing CA24h · +2 vs yesterdayNOW3,329 curated domains not answering-6,389 vs yesterdayERRORS10,953 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,607 material changesacross 3,126 domains · +209 vs yesterdayDNS DRIFT26 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -1 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination sendgw.comCERT DRIFT9 domains switched issuing CA24h · +2 vs yesterdayNOW3,329 curated domains not answering-6,389 vs yesterdayERRORS10,953 responded with an errorlast probe · 5xx / 404 / 429 / 403

icf.com

Observed 2026-07-12T19:57:56.714Z (7h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Also usesDocuSignGoogle Search ConsoleAtlassianZoom
9 subdomains · consulting
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat icf.com actually stands on - every host below is a signed observation
icf.com
A / AAAA
52.160.192.200
Cloudflareserves the site
NS
edns2.ultradns.orgedns2.ultradns.comedns2.ultradns.bizedns2.ultradns.net
ultradns.org + ultradns.com + moreanswers its DNS
MX
gw4074.fortimail.com
fortimail.comreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.icf.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time30 ms
DNS resolutionNOERROR
Redirect chain
https://www.icf.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 52.160.192.200

MX 1

  • 0gw4074.fortimail.com

TXT 26

  • asv=09a3c3c06f8cebc18ebc573419d368c8
  • VHU/e8cTQug75V0Xl7ny1DHe/3GuNtdnGCHH1qkQhBNH2DwXu21/cYl9+qwcBNrZTZkiQS/WlTxHDWMiOkHBRw==
  • docusign=eedf51eb-69f4-4de5-a24d-e69894ceb0e1
  • jt619hy9q9q8tz0yy9cdk9q0t8rqpw86
  • smartsheet-site-validation=f_QbHBXu5199q7F7JM3sutaDgT55hPs_
  • jamf-site-verification=FhEqzaiYjjcB4PUsSQ_N-g
  • google-site-verification=R7Iq4_FcI2hUbHZHBQ9KUnH2GLP48fn8ANSaWGY8HDY
  • MS=ms79713083
  • qT1AM0rB8Oeymh14x8xaDOjbHTCBj0TJLIZDh1IZY7k46JfrHFyEuTENdNUeiOIFdebgnqK12Dv1iVrKAjpEeA==
  • 0ed1fe018a656e7e36935b401aab6d016610974590

NS 4

  • edns2.ultradns.org
  • edns2.ultradns.com
  • edns2.ultradns.biz
  • edns2.ultradns.net

SOA 1

  • edns2.ultradns.com premiumdns.support.neustar

TLS Certificates (0)

None.

Subdomains (9)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for icf.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for icf.com <a href="https://domaindrift.io/t/icf.com"> <img src="https://domaindrift.io/badge/icf.com.svg" width="300" height="64" alt="DomainDrift signed observations for icf.com"> </a>

Ed25519 Receipt

Receipt ID
4dcf2a51-87c8-4d48-84c6-49e2058aaf79
Output Hash
5c4d43dc9393c521867fe9a166e101682afff06dbcbc992c1a07f62b391ad452
Signature
ed25519:04b70c849097a343d0d1171dd6a9c97e2dc49d4497802379c742807eba9b162de73069981eb702067d3cb408f3ca7c6bac8bc2747a32a62980be6bb10b485e0f
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser