npmjs.org
Observed 2026-07-18T06:08:25.466Z (5h ago). Every field below was attested with an Ed25519 signature at scan time.
Up right now
Runs onCloudflare
Email byGoogle Workspace
Registered withMarkMonitor Inc.
IPv6 · 5 subdomains · tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat npmjs.org actually stands on - every host below is a signed observation
npmjs.org
A / AAAA
104.16.9.34104.16.11.34104.16.5.34104.16.1.34+20 more
Cloudflareserves the site
NS
sandy.ns.cloudflare.combayan.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
aspmx3.googlemail.comalt2.aspmx.l.google.comaspmx2.googlemail.comaspmx.l.google.com+1 more
Google Workspacereceives its email
HTTPS probe
redirect
Redirecting (3xx) 301 → https://www.npmjs.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time8 ms
DNS resolutionNOERROR
Redirect chain
https://www.npmjs.com/Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".
DNS Records
A 12
104.16.9.34104.16.11.34104.16.5.34104.16.1.34104.16.2.34104.16.3.34104.16.7.34104.16.0.34104.16.8.34104.16.6.34
AAAA 12
2606:4700::6810:4222606:4700::6810:7222606:4700::6810:3222606:4700::6810:a222606:4700::6810:2222606:4700::6810:1222606:4700::6810:5222606:4700::6810:222606:4700::6810:9222606:4700::6810:622
MX 5
50aspmx3.googlemail.com30alt2.aspmx.l.google.com40aspmx2.googlemail.com10aspmx.l.google.com20alt1.aspmx.l.google.com
TXT 4
keybase-site-verification=Ls8jN55i6KesjiX91Ck79bUZ17eA-iohmw2jJFM16xcstatus-page-domain-verification=gx37pw1xshfgv=spf1 -allv=DMARC1; p=reject; rua=mailto:dmarc@github.com; pct=100
NS 2
sandy.ns.cloudflare.combayan.ns.cloudflare.com
SOA 1
bayan.ns.cloudflare.com dns.cloudflare.com
CAA 10
issuewild comodoca.comissuewild ssl.comissue comodoca.comissuewild digicert.com; cansignhttpexchanges=yesissuewild letsencrypt.orgissuewild pki.goog; cansignhttpexchanges=yesissue digicert.com; cansignhttpexchanges=yesissue pki.goog; cansignhttpexchanges=yesissue letsencrypt.orgissue ssl.com
TLS Certificates (0)
None.
Subdomains (5)
The proof
Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.
Verify this receiptPut the receipt on your own site. A live badge showing what DomainDrift observes and signs for npmjs.org. It updates itself. It attests a signed observation - not that the site is safe.
<a href="https://domaindrift.io/t/npmjs.org">
<img src="https://domaindrift.io/badge/npmjs.org.svg"
width="300" height="64" alt="DomainDrift signed observations for npmjs.org">
</a>
Ed25519 Receipt
- Receipt ID
9e86f876-9516-4756-8b9e-42c7a4d54290- Output Hash
da4f852ab9ee33f2fe390695fe81bab381b078532c4e2cf9423d0020be43432b- Signature
ed25519:b75ce4060578f2a935f49e92b9cc73d0d792c5fdd9b1bb0bf0819fb239838b8d4192eff24fe5cfdf23eb56edecb9db954cb380a4917625824166578ca99a9d0c- Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff- Parent
(genesis)- Plane
- fast