CONTINUOUS INTERNET TELEMETRY24H DRIFT2,058 material changesacross 1,547 domains · last 24h · +142 vs yesterdayDNS DRIFT30 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT7 domains switched issuing CA24hNOW488 curated domains not reachablelast probe, steadySITE ERRORS20,651 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 112,068 sites429 rate-limit / 403 bot-block, a posture signal

investigativeproject.org

Observed Jul 24, 2026, 17:49 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email bySparkPost
Secured byGoogle Trust Services
Registered withRegister.com - Network Solutions, LLC
Also usesGoogle Search Console
IPv6 · non_profit
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat investigativeproject.org actually stands on - every host below is a signed observation
investigativeproject.org
A / AAAA
172.66.139.219172.66.133.1102606:4700:10::ac42:8bdb2606:4700:10::ac42:856e
Cloudflareserves the site
NS
dina.ns.cloudflare.comvern.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
cluster9.us.messagelabs.comcluster9a.us.messagelabs.com
SparkPostreceives its email
TLS
investigativeproject.org
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 172.66.139.219
  • 172.66.133.110

AAAA 2

  • 2606:4700:10::ac42:8bdb
  • 2606:4700:10::ac42:856e

MX 2

  • 10cluster9.us.messagelabs.com
  • 20cluster9a.us.messagelabs.com

TXT 4

  • MS=ms76508448
  • google-site-verification=25qqcAJ2EwVv99KyjnEItCI8H3G-kaRH0zABbRnbBEs
  • v=spf1 ptr:messagelabs.com include:sparkpostmail.com ip4:192.255.221.66 ip4:74.208.203.24 ip4:198.251.64.143 ~all
  • v=DMARC1; p=none; sp=none; fo=1;

NS 2

  • dina.ns.cloudflare.com
  • vern.ns.cloudflare.com

SOA 1

  • dina.ns.cloudflare.com dns.cloudflare.com

CAA 10

  • issue "comodoca.com"
  • issue "digicert.com; cansignhttpexchanges=yes"
  • issue "letsencrypt.org"
  • issue "pki.goog; cansignhttpexchanges=yes"
  • issue "ssl.com"
  • issuewild "comodoca.com"
  • issuewild "digicert.com; cansignhttpexchanges=yes"
  • issuewild "letsencrypt.org"
  • issuewild "pki.goog; cansignhttpexchanges=yes"
  • issuewild "ssl.com"

TLS Certificates (3)

Common NameIssuerExpires
investigativeproject.org C=US, O=Google Trust Services, CN=WE1 Sat, 19 Sep 2026 00:58:03 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for investigativeproject.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for investigativeproject.org <a href="https://domaindrift.io/t/investigativeproject.org"> <img src="https://domaindrift.io/badge/investigativeproject.org.svg" width="300" height="64" alt="DomainDrift signed observations for investigativeproject.org"> </a>

Ed25519 Receipt

Receipt ID
rcpt_91bce36555cbf760
Output Hash
2d7a0f7642f7b366a6b7aad0951942e629b46f491383c3026cf763cf59b5d73c
Signature
ed25519:67149081c84240a73137efa3f4a66522b6f2f78801de23f7aeae37327ab882c74a08265729569a0208c3df308f61df29fbf7254d32b3be8775d84a402a17db03
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser