CONTINUOUS INTERNET TELEMETRY24H DRIFT162 material changesacross 115 domains · +16 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,401 curated domains not answeringlast probe, steadyERRORS28,600 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,483 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT162 material changesacross 115 domains · +16 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,401 curated domains not answeringlast probe, steadyERRORS28,600 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,483 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

nhm.ac.uk

Observed Jul 18, 2026, 12:57 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Secured byGoogle Trust Services
Also usesAtlassianFacebook/MetaMiro
IPv6 · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat nhm.ac.uk actually stands on - every host below is a signed observation
nhm.ac.uk
A / AAAA
104.18.16.116104.18.17.1162606:4700::6812:10742606:4700::6812:1174
Cloudflareserves the site
NS
brit.ns.cloudflare.comjavier.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
nhm-ac-uk.mail.protection.outlook.com
Microsoft 365receives its email
TLS
nhm.ac.uk
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 104.18.16.116
  • 104.18.17.116

AAAA 2

  • 2606:4700::6812:1074
  • 2606:4700::6812:1174

MX 1

  • 1nhm-ac-uk.mail.protection.outlook.com

TXT 16

  • 3YJT79G9921Q8PUFJYYXQJG2EZ8NE9GEK5SHFPWZ
  • 9OI6U51P2JGSuHzztIjOAdGQy6DFohF5KWBF/dmiNSzxOayELRpOZZMKBre8zuGsI4L3FaJcR39WxdtmoD0bxA==
  • I7LCNPEQLKON50D9GSOX6TQNHCDCYH97EN0FYVN6G
  • access-domain-verification=de7d38516888281ef01a4b593824de82d240a6c4df313d7dca135fba265f6017
  • adobe-idp-site-verification=890a6b3b-31ea-4a2b-99ef-3734e507e434
  • apple-domain-verification=bIQWWKs6qKUMDm4G
  • atlassian-domain-verification=QajJuZTu3QKwvgah0TOSjp31prgJadCd06k8lqO2FslfvlyacLugg/M0nKP3aAYR
  • atlassian-domain-verification=aOWBheOvGJqLLZhi7zWbvfnpuD22JnaxSUo64KmLi2HvkBYdhux7Y2ACXXRBUuWa
  • facebook-domain-verification=fknil96xj84d9dv825bq0362h37qha
  • facebook-domain-verification=tprgf6tig7xixy9cr584h6y7x19xoz

NS 2

  • brit.ns.cloudflare.com
  • javier.ns.cloudflare.com

SOA 1

  • brit.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common NameIssuerExpires
nhm.ac.uk C=US, O=Google Trust Services, CN=WE1 Sat, 26 Sep 2026 18:22:00 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nhm.ac.uk. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for nhm.ac.uk <a href="https://domaindrift.io/t/nhm.ac.uk"> <img src="https://domaindrift.io/badge/nhm.ac.uk.svg" width="300" height="64" alt="DomainDrift signed observations for nhm.ac.uk"> </a>

Ed25519 Receipt

Receipt ID
899d67dc-0ec4-4c98-86cb-67be54ed4c51
Output Hash
66532fb15b202df420a5047ce27c3b8bd937cebc815b8ad2ede7e234d73ec313
Signature
ed25519:21120b46520171f6ba7edd798d286bdf9f9cb6aa879b2d37726707c439d68062bcb59811ae8a92164af3b0b428db6f8610e20360c54902c085666686a73fd907
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser