CONTINUOUS INTERNET TELEMETRY24H DRIFT2,090 material changesacross 1,954 domains · +668 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.com · -6 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +3 vs yesterdayCERT DRIFT46 domains switched issuing CA24h · +46 vs yesterdayNOW1,100 curated domains not answering+390 vs yesterdayERRORS8,591 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED23,337 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,090 material changesacross 1,954 domains · +668 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.com · -6 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +3 vs yesterdayCERT DRIFT46 domains switched issuing CA24h · +46 vs yesterdayNOW1,100 curated domains not answering+390 vs yesterdayERRORS8,591 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED23,337 throttled or blocked our scanner429 rate-limit / 403 bot-block

soa.org

Observed Jul 17, 2026, 15:34 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesZoomFigmaFacebook/MetaGoogle Search ConsoleAtlassian
15 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat soa.org actually stands on - every host below is a signed observation
soa.org
A / AAAA
217.114.94.2
Cloudflareserves the site
NS
ns41.constellix.netns21.constellix.comns31.constellix.comns11.constellix.com+2 more
constellix.net + constellix.comanswers its DNS
MX
mxb-00337001.gslb.pphosted.commxa-00337001.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.soa.org/
HTTP status301
Servercloudflare
TLS protocolHTTP/3
TLS issuernot observed
Behind Cloudflareyes
Response time48 ms
DNS resolutionNOERROR
Redirect chain
https://www.soa.org/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 217.114.94.2

MX 2

  • 0mxb-00337001.gslb.pphosted.com
  • 0mxa-00337001.gslb.pphosted.com

TXT 16

  • ZOOM_verify_cvOoRnBnQtyAKhlXDi8aCQ
  • figma-domain-verification=95ff967dfd55f72c837d47d0474217a1fd1996f1a694f6132d5530a2bb1ba5a9-1726604761
  • spycloud-domain-verification=af7bd892-f484-4619-8b65-c0ca5cd2c896
  • spycloud-domain-verification=93d96277-22e4-47c2-a0cb-20efb9d57836
  • facebook-domain-verification=9bv47y3dovm21h7g18gcfaff8wr8p2
  • t3rkud2b13hp6evr0rt1otacmd
  • v=spf1 a:mail.planion.com ip4:64.78.151.128/26 ip4:44.225.221.126 ip4:107.20.210.250 ip4:52.1.14.157 a:smtp.uapps.net ip4:34.217.223.69 ip4:104.42.152.64 ip4:40.118.228.30 ip4:40.118.235.170 ip4:40.118.239.187 ip4:40.118.232.194 ip4:149.72.193.199 ip4:168.245.114.230 ip4:168.245.50.210 ip4:149.72.202.199 ip4:168.245.124.6 ip4:173.193.210.32/27 ip4:50.23.218.192/27 ip4:174.37.226.64/27 ip4:208.43.239.136/30 ip4:184.173.105.0/24 ip4:184.173.153.0/24 ip4:104.130.122.0/23 ip4:146.20.112.0/26 ip4:141.193.32.0/23 ip4:209.61.151.0/24 ip4:166.78.68.0/22 ip4:198.61.254.0/23 ip4:192.237.158.0/23 ip4:23.253.182.0/23 ip4:104.130.96.0/28 ip4:146.20.113.0/24 ip4:146.20.191.0/24 ip4:159.135.224.0/20 ip4:69.72.32.0/20 ip4:3.219.14.196 ip4:100.20.82.77 ip4:35.82.75.212 include:spf.protection.outlook.com include:sendgrid.net include:spf-00337001.pphosted.com include:spf2.soa.org ~all
  • google-site-verification=3t0SeCNOEkBRvZ-7BcnJEgRK8KxjlmkYKD5SKNSrHvo
  • spycloud-domain-verification=70b386ea-a2c3-4f9a-91c1-2634d9ac588e
  • duo_sso_verification=40MMqkSwLp4luHV83KF96qCnDt4O41WSsyDqdEAvOb9jQ0FyJvU7Xd429StCb3t3

NS 6

  • ns41.constellix.net
  • ns21.constellix.com
  • ns31.constellix.com
  • ns11.constellix.com
  • ns61.constellix.net
  • ns51.constellix.net

SOA 1

  • ns11.constellix.com dns.constellix.com

TLS Certificates (0)

None.

Subdomains (15)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for soa.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for soa.org <a href="https://domaindrift.io/t/soa.org"> <img src="https://domaindrift.io/badge/soa.org.svg" width="300" height="64" alt="DomainDrift signed observations for soa.org"> </a>

Ed25519 Receipt

Receipt ID
87ee63e3-975d-4e5e-8abf-2af4d687ee94
Output Hash
5459d45fab684572dbb92604aaeb60eafa4292f00f9316ef9c1f0edd67e53d90
Signature
ed25519:16e9704858aea0d53556fd9259b2dba0037eae70d3df6e36332250c3b5dfb4257e92ed809b3d12bf327abbbbf8b6661b242eaf836bd457fe998791b658648c05
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser