nhs.uk

Observed Jul 18, 2026, 12:42 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onMicrosoft Corporation

Email byMandrill (Mailchimp)

Secured byDigiCert

Registered withNominet UK

Also usesFacebook/MetaGoogle Search Console

healthcare

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat nhs.uk actually stands on - every host below is a signed observation

nhs.uk

A / AAAA

4.158.93.42

Microsoft Corporationserves the site

ns1.nhs.ukns2.nhs.ukns3.nhs.ukns4.nhs.uk

nhs.ukanswers its DNS

mail.nhs.uk

Mandrill (Mailchimp)receives its email

TLS

nhs.uk

DigiCert Incissued its certificate

DNS Records

A 1

4.158.93.42

MX 1

50mail.nhs.uk

TXT 8

1.2.3.4
v=spf1 ip4:195.104.77.0/23 ip4:10.176.129.120 ip4:10.228.178.230 ip4:194.72.83.215 ip4:194.72.83.216 ip4:194.155.93.52/31 include:esa1.hc1668-91.c3s2.iphmx.com include:esa2.hc1668-91.c3s2.iphmx.com include:spf.protection.outlook.com include:_spf.nhs.net include:spf.mandrillapp.com -all
apple-domain-verification=NiFUi4F53AsxfAxv
facebook-domain-verification=lv7tnthk77oqcuocg7u86rnoafjj3z
google-site-verification=dwWXwcFQckdoNrWU_5siMlG_aXHlXMhkddd7xDehP5c
64gp3t2128n6avl30cct29hmtq
_8qn8jz0octd5khtd2sv0ujib7m0zhc7.dcv.digicert.com
v=DMARC1; p=reject; sp=none;adkim=s;aspf=s;fo=1; rua=mailto:A-NE.postmaster@nhs.net,mailto:dmarc-rua@dmarc.service.gov.uk

NS 4

ns1.nhs.uk
ns2.nhs.uk
ns3.nhs.uk
ns4.nhs.uk

SOA 1

ns1.nhs.uk hostmaster.nominet.uk

TLS Certificates (3)

Common Name	Issuer	Expires
`nhs.uk`	C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1	Sat, 16 Jan 2027 23:59:59 +0000
`DigiCert Global G2 TLS RSA SHA256 2020 CA1`	C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2	Sat, 29 Mar 2031 23:59:59 +0000
`DigiCert Global Root G2`	C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2	Fri, 15 Jan 2038 12:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nhs.uk. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/nhs.uk">
  <img src="https://domaindrift.io/badge/nhs.uk.svg"
       width="300" height="64" alt="DomainDrift signed observations for nhs.uk">
</a>

Ed25519 Receipt

Receipt ID: 575831af-ef20-46ef-a230-fda8024f8391
Output Hash: 951f18fda7e5e271825da77581ef67871b3d76dcb4dc76f7f5662ffedeadc696
Signature: ed25519:baaaaf403592df80b905e58db52cca35361d9a2918ca69f114732412fe66185bb78c9ec5c5424f31a2903e8e6964f22a5ad347cad820d6187fc8e1ec8d7ced07
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/nhs.uk