CONTINUOUS INTERNET TELEMETRY24H DRIFT27,060 material changesacross 26,158 domains · 24h to ~13h ago · -10,962 vs yesterdayROTATION58 domains moved DNS from kirklanddc.com to koaladns.com, 56 moved backa rotation loop, not a migration · 24hREGISTRAR DRIFT1 changed registrar24hNOW561 curated domains not reachable+30 vs yesterdaySITE ERRORS33,742 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 117,733 sites429 rate-limit / 403 bot-block, a posture signal

ncsbn.org

Observed Aug 3, 2026, 01:54 UTC (4d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of ncsbn.org was taken 4d ago

ncsbn.org is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting ncsbn.org under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch ncsbn.org Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Up right now
Email byMicrosoft 365
Secured bySectigo
Also usesFacebook/MetaGoogle Search ConsoleAtlassian
32 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ncsbn.org actually stands on - every host below is a signed observation
ncsbn.org
A / AAAA
34.144.206.224
unattributedserves the site
NS
ns1-06.azure-dns.comns2-06.azure-dns.netns3-06.azure-dns.orgns4-06.azure-dns.info
azure-dns.com + azure-dns.net + moreanswers its DNS
MX
ncsbn-org.mail.protection.outlook.com
Microsoft 365receives its email
TLS
opentext.ncsbn.org
Sectigo Limitedissued its certificate

DNS Records

A 1

  • 34.144.206.224

MX 1

  • 10ncsbn-org.mail.protection.outlook.com

TXT 17

  • MS=ms70471854
  • apple-domain-verification=OMQAQdd2Gw0tRH6S
  • bw=yHp1F2YJ0hPsSMqmKwyRooy+Uet1SgCy0Hg4MCgCpXQ9
  • amazonses:qANUJ2YP/IslNRAcLLo/kDzYBnBZQk2zkIomiceL+H8=
  • facebook-domain-verification=gtpbn136pl3qfqn62zcgxspj55tign
  • twilio-domain-verification=615fd55322a690dd0a5332f039c14ff1
  • v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
  • globalsign-domain-verification=1AB4A9D07FF5E0DB68755AC490978475
  • globalsign-domain-verification=68B75AEAD9879F689B1E7870C60BFC77
  • globalsign-domain-verification=913F74C360E9322789801997B8F52C1D

NS 4

  • ns1-06.azure-dns.com
  • ns2-06.azure-dns.net
  • ns3-06.azure-dns.org
  • ns4-06.azure-dns.info

SOA 1

  • ns1-06.azure-dns.com netadmin.ncsbn.org

SRV 3

  • lanexpressepd1.ncsbn.org:5060 p0
  • lanexpressepd1.ncsbn.org:5061 p0
  • owa.ncsbn.org:443 p0

DMARC_RECORDS 1

  • v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email,mailto:spam@ncsbn.org; ruf=mailto:spam@ncsbn.org

TLS Certificates (3)

Common NameIssuerExpires
opentext.ncsbn.org C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 Tue, 11 Aug 2026 23:59:59 +0000
Sectigo Public Server Authentication CA DV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Wed, 21 Mar 2046 23:59:59 +0000

Subdomains (32)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_01d66865b76fc621
Output Hash
bfc24df862fbe11c5eae4c37945fbf1f9ab4b39ca791ee855941b599f6e17e98
Signature
ed25519:54d6f197ab4f74f0aae6299eb0d2a25aa25fad75f08af41cc9601b0d21f0ce457e3aa96ad2c01b3819fe2985a3506c5a7babf9219e7ea774a71760eb226ebf0e
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser