nordstrom.com

Observed Jul 21, 2026, 19:11 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onFastly

Email byProofpoint

Secured bySectigo

Registered withMarkMonitor Inc.

Also usesAtlassianFacebook/MetaGoogle Search ConsoleDocuSign

3 subdomains · retail

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat nordstrom.com actually stands on - every host below is a signed observation

nordstrom.com

A / AAAA

151.101.2.132151.101.194.132151.101.66.132151.101.130.132

Fastlyserves the site

dns1.p02.nsone.netdns2.p02.nsone.netdns3.p02.nsone.netdns4.p02.nsone.net+4 more

nsone.net + nordstromdns.comanswers its DNS

mxa-00411f01.gslb.pphosted.commxb-00411f01.gslb.pphosted.com

Proofpointreceives its email

TLS

nordstrom.com

Sectigo Limitedissued its certificate

DNS Records

A 4

151.101.2.132
151.101.194.132
151.101.66.132
151.101.130.132

MX 2

10mxa-00411f01.gslb.pphosted.com
10mxb-00411f01.gslb.pphosted.com

TXT 40

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:helpscoutemail.com include:spfprd1.everbridge.net include:_spf.cnddtid.com include:em6708.nordstrom.com ~all
atlassian-domain-verification=/ledvMzww1yLXYpugnlAfIFkapTO5o9KOtTIJa6zHJRffVqHCvzDnT5oMUhdWnBo
facebook-domain-verification=7e1irfza2ta9k4cdcalaht8uvrr1k1
e1d4m45n5le4ntcrlr0hb8043s
amazonses:6U10XkUfFdyuH8X/ySrBFs3fOItPgVcc5/U3Oeb9/T8=
MS=ms64056457
amazonses:VlTCMDKBzUE+sherpQ9sVN3JFuKk1ppsjeswxtOE8vY=
google-site-verification=g249xGB3Zj7t-KIaT4JFX3zIs6urBf6Z-X2QkePnvyQ
jb03qdonfa1ibcdmrec994365m
docusign=865753d5-8f62-4456-8001-1e69d4265ae3

NS 8

dns1.p02.nsone.net
dns2.p02.nsone.net
dns3.p02.nsone.net
dns4.p02.nsone.net
ns01.nordstromdns.com
ns02.nordstromdns.com
ns03.nordstromdns.com
ns04.nordstromdns.com

SOA 1

dns1.p01.nsone.net hostmaster.nsone.net

SRV 2

boss.nordstrom.com:5060 p10
boss.nordstrom.com:5061 p10

TLS Certificates (3)

Common Name	Issuer	Expires
`nordstrom.com`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36	Wed, 23 Sep 2026 23:59:59 +0000
`Sectigo Public Server Authentication CA OV R36`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46	Fri, 21 Mar 2036 23:59:59 +0000
`Sectigo Public Server Authentication Root R46`	C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority	Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nordstrom.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/nordstrom.com">
  <img src="https://domaindrift.io/badge/nordstrom.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for nordstrom.com">
</a>

Ed25519 Receipt

Receipt ID: rcpt_7d69b86c7158fc46
Output Hash: d39f17bc39e4cd650ae5aaec54b6b6558adc3723879970eff9a30c8eb33b1dbb
Signature: ed25519:277aa031cd018965b4cc53c35a9b84a522bbdf0550e45e9215a8c98a886ffd13551b80db558f0b21900573b906c7ffad6a95ec5533d5d9cabec0bff8c0267007
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/nordstrom.com