CONTINUOUS INTERNET TELEMETRY24H DRIFT4,090 material changesacross 3,648 domains · last 24h · -6,325 vs yesterdayDNS DRIFT224 domains changed DNS providertop destination cloudflare.com · -435 vs yesterdayEMAIL DRIFT43 domains switched email providertop destination google.com · -124 vs yesterdayCERT DRIFT52 domains switched issuing CA24h · -167 vs yesterdayNOW492 curated domains not reachable-211 vs yesterdaySITE ERRORS17,232 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,525 sites429 rate-limit / 403 bot-block, a posture signal

ncte.org

Observed Jul 24, 2026, 02:03 UTC (14h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Email byMimecast
Secured byLet's Encrypt
Also usesGoogle Search ConsoleFacebook/Meta
IPv6 · 2 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ncte.org actually stands on - every host below is a signed observation
ncte.org
A / AAAA
23.185.0.42620:12a:8000::42620:12a:8001::4
2620serves the site
NS
ns71.domaincontrol.comns72.domaincontrol.com
domaincontrol.comanswers its DNS
MX
us-smtp-inbound-1.mimecast.comus-smtp-inbound-2.mimecast.com
Mimecastreceives its email
TLS
ncte.org
Let's Encryptissued its certificate

DNS Records

A 1

  • 23.185.0.4

AAAA 2

  • 2620:12a:8000::4
  • 2620:12a:8001::4

MX 2

  • 10us-smtp-inbound-1.mimecast.com
  • 10us-smtp-inbound-2.mimecast.com

TXT 15

  • sophos-domain-verification=ab1c31e0f9a8eb84235d40bdc8a136a2a8ac066c
  • google-site-verification=qBaIH7HLkvp1FwoGoSHVx6iZrDhaLzZ3dGRPbXyzxXI
  • google-site-verification=h2kRqs4H_tqCy3ap623t6FZWeaHGkxUegmXhJwt_JXo
  • google-site-verification=roOPHoOtE9AUcYOi5tU3OllD66rUgVIilOcp4-6ljEg
  • facebook-domain-verification=g5l1spgiebnor8kbqep729d61xg3wq
  • v=spf1 include:us._netblocks.mimecast.com include:spf.protection.outlook.com include:teachers.zendesk.com include:mail2.netronixcorp.com include:spf.ess.barracudanetworks.com include:_spf.salesforce.com include:_spf.createsend.com ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 ip4:159.183.0.0/16 ip4:223.165.113.0/24 ip4:223.165.115.0/24 ip4:223.165.118.0/23 ip4:223.165.120.0/23 -all
  • 3g8k292082hjubiups8p8q09q
  • prod-monads.azurewebsites.net
  • 73CD4A2C3417669ECF93969D62B288CB6C9AA90D026BE20CCCF977DEC803DBE8
  • MtlIckMruP2TbOthtcdqyYjzwZqsuTMg0JIPisPE1Ro

NS 2

  • ns71.domaincontrol.com
  • ns72.domaincontrol.com

SOA 1

  • ns71.domaincontrol.com dns.jomax.net

TLS Certificates (3)

Common NameIssuerExpires
ncte.org C=US, O=Let's Encrypt, CN=YR1 Sat, 17 Oct 2026 05:22:05 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ncte.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ncte.org <a href="https://domaindrift.io/t/ncte.org"> <img src="https://domaindrift.io/badge/ncte.org.svg" width="300" height="64" alt="DomainDrift signed observations for ncte.org"> </a>

Ed25519 Receipt

Receipt ID
rcpt_a108af65cfacabff
Output Hash
019a8d4e03b34d43489275c6d40ca352641aaa686b144f40d8d73a681baa1051
Signature
ed25519:0b2e417a71d611145bf794dba10d675b10ecfc2b2768b5feabc19ee88d1e8a3950c63e1c686e8fcdefc3f7ee698bb44383486b8935a0c1b7666b596f9816330d
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser