CONTINUOUS INTERNET TELEMETRY24H DRIFT2,086 material changesacross 1,951 domains · +664 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.com · -6 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +3 vs yesterdayCERT DRIFT46 domains switched issuing CA24h · +46 vs yesterdayNOW1,089 curated domains not answering+379 vs yesterdayERRORS8,430 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED22,890 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,086 material changesacross 1,951 domains · +664 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.com · -6 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +3 vs yesterdayCERT DRIFT46 domains switched issuing CA24h · +46 vs yesterdayNOW1,089 curated domains not answering+379 vs yesterdayERRORS8,430 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED22,890 throttled or blocked our scanner429 rate-limit / 403 bot-block

nsf.gov

Observed Jul 18, 2026, 12:27 UTC (11h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onU.S. National Science Foundation
Email byAmazon SES
Secured byDigiCert
Registered withget.gov
Also usesZoomGoogle Search ConsoleAtlassian
IPv6 · 1 subdomain · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat nsf.gov actually stands on - every host below is a signed observation
nsf.gov
A / AAAA
128.150.221.2442620:10f:6002:221::244
U.S. National Science Foundationserves the site
NS
ns1.nsf.govns2.nsf.govns3.nsf.gov
nsf.govanswers its DNS
MX
primary.us.etp.fireeyegov.comalt1.us.etp.fireeyegov.comalt2.us.etp.fireeyegov.comalt3.us.etp.fireeyegov.com
Amazon SESreceives its email
TLS
www-legacy-f5.nsf.gov
DigiCert Incissued its certificate

DNS Records

A 1

  • 128.150.221.244

AAAA 1

  • 2620:10f:6002:221::244

MX 4

  • 10primary.us.etp.fireeyegov.com
  • 20alt1.us.etp.fireeyegov.com
  • 30alt2.us.etp.fireeyegov.com
  • 40alt3.us.etp.fireeyegov.com

TXT 24

  • <metaname="zoom-domain-verification"content="ZOOM_verify_b3xjZjUUQx-tJoqy4aCUyg">
  • _lzfje4ty3ldoyjyctn0ynh388feixlo
  • _xosz4nirm95jhg4vwddfa6ihnqvxb5y
  • ZOOM_verify_e-wubZa8RVevvUsuV9EDjg
  • ZOOM_verify_vIOQy6f2SQWeZ2977lDjcQ
  • jamf-site-verification=_ilsvY6K1PzATsYm5gIUdA
  • amazonses:CJeGepY8qu0s5Rvnp0WG10sbMjRq+6TZ7fiY6bMqpiI=
  • amazonses:DamZDYghwrc36rQV5r31e65CG+IMCDnwWTHIYOBhJXw=
  • amazonses:KT2VTwGZXoLetXUWN88a5yYAGXBROcTpc2ZnkOfLDJs=
  • amazonses:WZKkPkyla+989ZOi22G9mHBRQ5+AFckOtwOzHCrGjw0=

NS 3

  • ns1.nsf.gov
  • ns2.nsf.gov
  • ns3.nsf.gov

SOA 1

  • p-dns-i-gridmstr01.nsf.gov postmaster.nsf.gov

SRV 6

  • expresswayedge1.nsf.gov:5060 p10
  • expresswayedge2.nsf.gov:5060 p10
  • expresswayedge1.nsf.gov:5061 p10
  • expresswayedge2.nsf.gov:5061 p10
  • xmpp.nsf.gov:5222 p0
  • lyncxmpp.nsf.gov:5269 p100

TLS Certificates (3)

Common NameIssuerExpires
www-legacy-f5.nsf.gov C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 Tue, 19 Jan 2027 23:59:59 +0000
DigiCert Global G2 TLS RSA SHA256 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Sat, 29 Mar 2031 23:59:59 +0000
DigiCert Global Root G2 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Fri, 15 Jan 2038 12:00:00 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nsf.gov. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for nsf.gov <a href="https://domaindrift.io/t/nsf.gov"> <img src="https://domaindrift.io/badge/nsf.gov.svg" width="300" height="64" alt="DomainDrift signed observations for nsf.gov"> </a>

Ed25519 Receipt

Receipt ID
88a4885f-dbc2-4d74-91da-5d379e969a84
Output Hash
ae07659790719799028ff477c23b3a462fd0ed31ec3f3e09084fbcc925baf349
Signature
ed25519:5833b97d5e8658282e70dd141e8b7bfa474780f42f6d9b9ecd67e259bcad105f017e35f54994498a0057e28a3cb8bbd821d97c33efbe7a845b464c2f8640ac04
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser