CONTINUOUS INTERNET TELEMETRY24H DRIFT219 material changesacross 144 domains · +73 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,691 curated domains not answering+357 vs yesterdayERRORS30,371 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,415 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT219 material changesacross 144 domains · +73 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,691 curated domains not answering+357 vs yesterdayERRORS30,371 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,415 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

samhsa.gov

Observed Jul 18, 2026, 12:18 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onU.S. Dept. of Health and Human Services
Secured byIdenTrust
Registered withget.gov
IPv6 · 1 subdomain · government_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat samhsa.gov actually stands on - every host below is a signed observation
samhsa.gov
A / AAAA
158.71.215.157158.71.215.1582607:f220:600:1::c16
U.S. Dept. of Health and Human Servicesserves the site
NS
ns1-06.azure-dns.comns2-06.azure-dns.netns3-06.azure-dns.orgns4-06.azure-dns.info
azure-dns.com + azure-dns.net + moreanswers its DNS
MX
primary.us.etp.fireeyegov.comalt1.us.etp.fireeyegov.comalt2.us.etp.fireeyegov.comalt3.us.etp.fireeyegov.com
fireeyegov.comreceives its email
TLS
samhsa.gov
IdenTrustissued its certificate

DNS Records

A 2

  • 158.71.215.157
  • 158.71.215.158

AAAA 1

  • 2607:f220:600:1::c16

MX 4

  • 10primary.us.etp.fireeyegov.com
  • 20alt1.us.etp.fireeyegov.com
  • 30alt2.us.etp.fireeyegov.com
  • 40alt3.us.etp.fireeyegov.com

TXT 7

  • MS=ms28486698
  • ce38528adb3c4d32a35f961e7db3483e
  • identrust_validate=Uu01mdgMkwbtOtoH7be7iait4dEJ7cWF++ygSJ0lna77
  • 5LrSaNBp8XxOKi3QME8/sLV4SkT16NlcxZKlo8We40Z+p2Z85WXDF963vBqRJU9CAipXB3oXAS7cdEscsyisLA==
  • adobe-sign-verification=cbb77f92efc6fe00ce1ce479f41ccf74d90b2242a6f8435f77b3b7265528530f
  • v=spf1 a mx ip4:158.74.17.50 ip4:20.12.18.210 ip4:172.172.15.1 ip4:52.45.112.110 ip4:96.127.38.109 ip4:96.127.48.54 ip4:128.231.89.202 ip4:165.112.69.25 ip4:165.112.69.26 ip4:158.72.139.19 include:spf.protection.outlook.com -all
  • v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:8idhoybh@ag.us.dmarcian.com,mailto:reports@dmarc.cyber.dhs.gov; ruf=mailto:8idhoybh@fr.us.dmarcian.com;

NS 4

  • ns1-06.azure-dns.com
  • ns2-06.azure-dns.net
  • ns3-06.azure-dns.org
  • ns4-06.azure-dns.info

SOA 1

  • ns1-06.azure-dns.com azuredns-hostmaster.microsoft.com

CAA 4

  • issue "amazon.com"
  • issue "digicert.com"
  • issue "entrust.net"
  • issue "identrust.com"

TLS Certificates (4)

Common NameIssuerExpires
samhsa.gov C=US, O=IdenTrust, 2.5.4.11=HydrantID Trusted Certificate Service, CN=HydrantID Server CA O1 Fri, 12 Mar 2027 13:51:16 +0000
samhsa.gov C=US, O=IdenTrust, 2.5.4.11=HydrantID Trusted Certificate Service, CN=HydrantID Server CA O1 Fri, 12 Mar 2027 13:51:16 +0000
HydrantID Server CA O1 C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1 Wed, 12 Dec 2029 16:56:15 +0000
IdenTrust Commercial Root CA 1 C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1 Mon, 16 Jan 2034 18:12:23 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for samhsa.gov. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for samhsa.gov <a href="https://domaindrift.io/t/samhsa.gov"> <img src="https://domaindrift.io/badge/samhsa.gov.svg" width="300" height="64" alt="DomainDrift signed observations for samhsa.gov"> </a>

Ed25519 Receipt

Receipt ID
2180af69-84cf-4ac6-b5b2-91293b92f2b1
Output Hash
73f191c74691e7fe3922aa2e894e89e9541558ea7fd88ac38d83fbaba6bc91d2
Signature
ed25519:d4144ed9f731c1f793fbbf24bc1feb7cf72ea6545c764721d84e6cdedfd710a5ea11db8f2bbf8206d4e7cb40e408127a6628d7fb4d1f0be57ffc730c861ac504
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser