CONTINUOUS INTERNET TELEMETRY24H DRIFT6,846 material changesacross 6,546 domains · +5,937 vs yesterdayDNS DRIFT434 domains changed DNS providertop destination parity.domains · +408 vs yesterdayEMAIL DRIFT91 domains switched email providertop destination google.com · +83 vs yesterdayCERT DRIFT158 domains switched issuing CA24h · +135 vs yesterdayNOW1,805 curated domains not answering-905 vs yesterdayERRORS20,948 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED92,802 throttled or blocked our scanner429 rate-limit / 403 bot-block

neh.gov

Observed Jul 22, 2026, 00:49 UTC (13h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onAmazon
Email byMicrosoft 365
Secured byDigiCert
Registered withget.gov
Also usesGoogle Search Console
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat neh.gov actually stands on - every host below is a signed observation
neh.gov
A / AAAA
23.21.228.79
Amazonserves the site
NS
sauthns1.qwest.netsauthns2.qwest.net
qwest.netanswers its DNS
MX
neh-gov.mail.protection.outlook.com
Microsoft 365receives its email
TLS
neh.gov
DigiCert Incissued its certificate

DNS Records

A 1

  • 23.21.228.79

MX 1

  • 0neh-gov.mail.protection.outlook.com

TXT 8

  • MS=ms73362329
  • @=nehreachbeta.azuewebsites.net
  • apple-domain-verification=0nLtiCxe1um1wQeE
  • google-site-verification=TEoPo7bJ4o1MvVyHDcyVEEGiS73GoDTf-LduK6yNlHI
  • adobe-sign-verification=ae0fa23a3871f3323b07bb5597c0f17d612ed04ae6d358920f2164c1a8c57d54
  • asuid.neastagingreach.egmsa DB1D5266771BA055CAE863A7EA8B86CF2C044D773817BA96E1B594F6A79E5152
  • v=spf1 ip4:65.114.144.66 ip4:65.114.144.90 ip4:65.196.123.228 ip4:65.196.123.227 ip4:65.196.123.226 ip4:65.196.123.225 ip4:52.222.69.242 ip4:52.222.68.204 ip4:96.127.113.23 ip4:149.72.129.240 include:spf.congressplus.com include:spf.protection.outlook.com include:mail.zendesk.com -all
  • v=DMARC1; p=reject; pct=100; rua=mailto:oirm@neh.gov,mailto:reports@dmarc.cyber.dhs.gov,mailto:kebpfyc0@ag.dmarcian.com

NS 2

  • sauthns1.qwest.net
  • sauthns2.qwest.net

SOA 1

  • sauthns2.qwest.net abuse.centurylinkservices.net

TLS Certificates (3)

Common NameIssuerExpires
neh.gov C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 Tue, 24 Nov 2026 23:59:59 +0000
DigiCert Global G2 TLS RSA SHA256 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Sat, 29 Mar 2031 23:59:59 +0000
DigiCert Global Root G2 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Fri, 15 Jan 2038 12:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for neh.gov. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for neh.gov <a href="https://domaindrift.io/t/neh.gov"> <img src="https://domaindrift.io/badge/neh.gov.svg" width="300" height="64" alt="DomainDrift signed observations for neh.gov"> </a>

Ed25519 Receipt

Receipt ID
rcpt_e1832162eac7f516
Output Hash
b0bdb62e0b47c591c01293b48593d24c6fe34d4f6701016a8bb7c268e70603ea
Signature
ed25519:6c2e72cf502cee6d954f07ac05065c09642a4c0534eb73205ae63a3f603a8b720e6e3938d743a552cb43d22cb4a484c71d2b67a7b208b86e155fe9e480b73f01
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser