CONTINUOUS INTERNET TELEMETRY24H DRIFT164 material changesacross 117 domains · +18 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,440 curated domains not answeringlast probe, steadyERRORS29,049 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED86,382 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT164 material changesacross 117 domains · +18 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,440 curated domains not answeringlast probe, steadyERRORS29,049 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED86,382 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

nngroup.com

Observed Jul 18, 2026, 12:51 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onSucuri
Email byGoogle Workspace
Secured byStarfield Technologies
Registered withGoDaddy.com, LLC
Also usesGoogle Search Console
1 subdomain · tranco_10k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat nngroup.com actually stands on - every host below is a signed observation
nngroup.com
A / AAAA
192.124.249.113
Sucuriserves the site
NS
ns1.dnsimple.comns2.dnsimple.comns3.dnsimple.comns4.dnsimple.com
dnsimple.comanswers its DNS
MX
aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.com+1 more
Google Workspacereceives its email
TLS
nngroup.com
Starfield Technologiesissued its certificate

DNS Records

A 1

  • 192.124.249.113

MX 5

  • 0aspmx.l.google.com
  • 10alt1.aspmx.l.google.com
  • 10alt2.aspmx.l.google.com
  • 25aspmx2.googlemail.com
  • 25aspmx3.googlemail.com

TXT 6

  • google-site-verification=kyKsox8uvugkyoBLGufbebnw7LDgx8ZkCszXdonndtk
  • CF9424EB1D
  • google-site-verification=Nkz-QAR-TpsDAoezza4B_kBCbO4J3_eW9KRtiTkmFMk
  • v=spf1 include:teamdesk.net include:amazonses.com include:_spf.google.com include:servers.mcsv.net include:app.sgizmo.com include:mail.zendesk.com ~all
  • google-site-verification=yyaEQxusOE5A3328gnCZrCr7VcLdIKXSBW1NbRpQpb8
  • v=DMARC1; p=reject; rua=mailto:dmarc@nngroup.com,mailto:dmarc_agg@vali.email; ruf=mailto:dmarc@nngroup.com; fo=1; ri=86400; pct=100

NS 4

  • ns1.dnsimple.com
  • ns2.dnsimple.com
  • ns3.dnsimple.com
  • ns4.dnsimple.com

SOA 1

  • ns1.dnsimple.com admin.dnsimple.com

CAA 8

  • iodef "mailto:support@nngroup.com"
  • issue "amazonaws.com"
  • issue "godaddy.com"
  • issue "letsencrypt.org"
  • issue "sectigo.com"
  • issue "starfieldtech.com"
  • issuewild "letsencrypt.org"
  • issuewild "sectigo.com"

TLS Certificates (3)

Common NameIssuerExpires
nngroup.com C=US, O=Starfield Technologies, CN=Starfield TLS Intermediate CA DV - R1v1 Wed, 23 Sep 2026 09:54:44 +0000
Starfield TLS Intermediate CA DV - R1v1 C=US, O=Starfield Technologies, CN=Starfield TLS Root CA - R1 Thu, 23 Aug 2040 11:59:59 +0000
Starfield TLS Root CA - R1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2 Thu, 31 Dec 2037 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nngroup.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for nngroup.com <a href="https://domaindrift.io/t/nngroup.com"> <img src="https://domaindrift.io/badge/nngroup.com.svg" width="300" height="64" alt="DomainDrift signed observations for nngroup.com"> </a>

Ed25519 Receipt

Receipt ID
ebd6c6ce-61ec-4fad-8e44-eaa2b374dd08
Output Hash
c77786fc88e22a11422d0527961e940bcf6a428e1e4000bc4ea8b8df698fe3e4
Signature
ed25519:d461380b99761c283dbca6f2bcc98e0e8125a942c5e797557bc243e2ec22cf9c4438bc4d4787ac905618f701aab0cb351a7006534f400d4fb5905c105ac85600
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser