nixos.org

Observed Jul 18, 2026, 12:01 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onAmazon

Secured byLet's Encrypt

Registered withGandi SAS

Also usesGoogle Search Console

1 subdomain · open_source

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat nixos.org actually stands on - every host below is a signed observation

nixos.org

A / AAAA

75.2.60.599.83.231.61

Amazonserves the site

ns-161-c.gandi.netns-177-a.gandi.netns-61-b.gandi.net

gandi.netanswers its DNS

umbriel.nixos.org

nixos.orgreceives its email

TLS

nixos.org

Let's Encryptissued its certificate

DNS Records

A 2

75.2.60.5
99.83.231.61

MX 1

10umbriel.nixos.org

TXT 5

apple-domain-verification=OvacO4lGB9A6dBFg
v=spf1 a:umbriel.nixos.org -all
brevo-code:f580a125e215ecb440363a15cdf47a17
google-site-verification=Pm5opvmNjJOwdb7JnuVJ_eFBPaZYWNcAavY-08AJoGc
v=DMARC1; p=none

NS 3

ns-161-c.gandi.net
ns-177-a.gandi.net
ns-61-b.gandi.net

SOA 1

ns1.gandi.net hostmaster.gandi.net

CAA 3

issue "letsencrypt.org"
iodef "mailto:infra+caa@nixos.org"
issuewild ""

TLS Certificates (4)

Common Name	Issuer	Expires
`nixos.org`	C=US, O=Let's Encrypt, CN=YE1	Fri, 02 Oct 2026 18:43:47 +0000
`YE1`	C=US, O=ISRG, CN=Root YE	Sat, 02 Sep 2028 23:59:59 +0000
`Root YE`	C=US, O=Internet Security Research Group, CN=ISRG Root X2	Thu, 02 Sep 2032 23:59:59 +0000
`ISRG Root X2`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

www.nixos.org

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nixos.org. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/nixos.org">
  <img src="https://domaindrift.io/badge/nixos.org.svg"
       width="300" height="64" alt="DomainDrift signed observations for nixos.org">
</a>

Ed25519 Receipt

Receipt ID: dd297c66-2b56-4f7d-a02f-186cf53bfa4e
Output Hash: 03754b469d6847042e239d8807bf0cb86208c22e4142ab04f1418c46ccac26de
Signature: ed25519:06cb010cad5998eb1103d6f76134eb8883c7ef9d818d452c44f5fb746f6c8703a260ac44291f743552a262829874b5abe53c29834f1416dba39f67316e078006
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/nixos.org