ntp.org

Observed 2026-07-15T04:15:46.526Z (14h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Registered withTucows Domains Inc.

Also usesGoogle Search Console

IPv6 · 8 subdomains · tranco_1k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat ntp.org actually stands on - every host below is a signed observation

ntp.org

A / AAAA

209.148.110.246204.93.207.222001:1838:2000:41b::80:0

Cloudflareserves the site

anyns.pch.netdns1.udel.edudns2.udel.eduns1.everett.org

pch.net + udel.edu + moreanswers its DNS

mx0.chi1.ntfo.org

ntfo.orgreceives its email

HTTPS probe

redirect Redirecting (3xx) 302 → https://www.ntp.org/

HTTP status302

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time282 ms

DNS resolutionNOERROR

Redirect chain

https://www.ntp.org/

MCP This domain advertises an AI service endpoint at _mcp._tcp.

v=spf1 -all

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

209.148.110.246
204.93.207.22

AAAA 1

2001:1838:2000:41b::80:0

MX 1

10mx0.chi1.ntfo.org

TXT 7

v=spf1 a mx ip4:204.93.207.0/27 ip4:66.220.13.234 ip4:66.220.13.237 ip6:2001:470:1:205::234 ip6:2001:470:1:205::/64 ~all
google-site-verification=1BTIwQr05WxuBXsED2L-cWc-cC7_8NDYKoWMsmAyR3g
_globalsign-domain-verification=O60kZMoa5mBPIKKqd9FSRXcGUhU6s3rzZHzWNLAlL7
ntp-libera-310
google-site-verification=ISMNEfck75SW97AiPz0acClFpICIejjA6F5ijoHccZM
v=DMARC1; p=quarantine; rua=mailto:xpvutgi3@ag.dmarcian.com; ruf=mailto:xpvutgi3@fr.dmarcian.com; sp=quarantine; pct=100
v=spf1 -all

NS 4

anyns.pch.net
dns1.udel.edu
dns2.udel.edu
ns1.everett.org

SOA 1

ns1.everett.org postmaster.ntp.org

TLS Certificates (0)

None.

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ntp.org. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/ntp.org">
  <img src="https://domaindrift.io/badge/ntp.org.svg"
       width="300" height="64" alt="DomainDrift signed observations for ntp.org">
</a>

Ed25519 Receipt

Receipt ID: da3a056e-ae97-4cbb-b0b7-6afc11afb3fd
Output Hash: be5f0a73f247f3ed282b683265e421711990b06c2a40d7fae3ce5294d10118db
Signature: ed25519:f0b0faadb919cf64f6a9134e1c124f33f553d39e9603343fe1568df6401ac0d28e161f6481133636639c72560796810dfe7928358d78639498a8549c9335190a
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/ntp.org