sf.gov

Observed 2026-07-18T12:08:05.985453645+00:00 (4h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onAmazon

Email byMicrosoft 365

Secured byZeroSSL GmbH

Also usesDocuSignGoogle Search Console

government_expanded

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat sf.gov actually stands on - every host below is a signed observation

sf.gov

A / AAAA

99.83.129.6875.2.65.169

Amazonserves the site

dns101.netops.sspdata.netdns101.tripwire.netns1.sfgov.orgdns121.netops.sspdata.net+2 more

sspdata.net + tripwire.net + moreanswers its DNS

sf-gov.mail.protection.outlook.com

Microsoft 365receives its email

TLS

sf.gov

ZeroSSL GmbHissued its certificate

DNS Records

A 2

99.83.129.68
75.2.65.169

MX 1

10sf-gov.mail.protection.outlook.com

TXT 17

anthropic-domain-verification-b339m0=mRXUdtYK0gdj3mZoLZSLw67Wi
cisco-ci-domain-verification=4049c9351d99a986973c030b555c675f75d984b86c19a85d8a61a5dce3636309
docusign=30425ed2-d2d2-404f-a020-53c52c8704f7
smartsheet-site-validation=P8AirepFo92cHGbverZhHjuvOG68nEpb
box-domain-verification=dbc1ac9c36887ea2e9d7c62e3557927c8c8d6ac70513535f02d5780b50817ddc
google-site-verification=fDX-s2Gh3fkE3hXCLmIKFNt-NRXQP88HwfSNKaZT4Vs
openai-domain-verification=dv-OdorwpX6Pm7rVJkiv0mByNDw
airtable-verification=7cae8d240a1f62d9d36b22e6fbd49fa4
v=spf1 exists:%{i}._i.%{d}._d.espf.agari.com include:%{d}.0c.spf-protect.agari.com include:spf.protection.outlook.com -all
oci-domain-verification=QYHsHD4fh2q7Wwyj5YJVAHVmCG7Kvv3oPzbSJAjbbk1y

NS 6

dns101.netops.sspdata.net
dns101.tripwire.net
ns1.sfgov.org
dns121.netops.sspdata.net
dns111.netops.sspdata.net
ns2.sfgov.org

SOA 1

ns1.sfgov.org dnsadmin.tripwire.net

SRV 2

cityvoip-expressway1-edge1-mra-public.sf.gov:5061 p11
cityvoip-expressway1-edge2-mra-public.sf.gov:5061 p11

TLS Certificates (3)

Common Name	Issuer	Expires
`sf.gov`	C=AT, O=ZeroSSL GmbH, CN=ZeroSSL RSA DV SSL CA 2	Thu, 01 Oct 2026 23:59:59 +0000
`ZeroSSL RSA DV SSL CA 2`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46	Sun, 23 Sep 2035 23:59:59 +0000
`Sectigo Public Server Authentication Root R46`	C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority	Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for sf.gov. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/sf.gov">
  <img src="https://domaindrift.io/badge/sf.gov.svg"
       width="300" height="64" alt="DomainDrift signed observations for sf.gov">
</a>

Ed25519 Receipt

Receipt ID: 8643814b-9775-4fe4-91ab-d31a9d5184c5
Output Hash: 8c0a7f1df3de84a541349906825202ef18acea5e4c8245cd6534f34a104e7854
Signature: ed25519:502053bdecc409181057a37ebefd6e85667f316a9e9ebbf6591bf7bfed0edf0f480aedf3ad0d28bbf14f19a3bb2a02a6c4881233184c2953461514a02c181201
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/sf.gov