CONTINUOUS INTERNET TELEMETRY24H DRIFT10,242 material changesacross 9,837 domains · last 24h · -173 vs yesterdayDNS DRIFT654 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT164 domains switched email providertop destination google.com · -3 vs yesterdayCERT DRIFT212 domains switched issuing CA24h · -7 vs yesterdayNOW705 curated domains not reachablelast probe, steadySITE ERRORS18,162 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED96,669 throttled or blocked our scanner429 rate-limit / 403 bot-block

turbotax.com

Observed Jul 21, 2026, 19:39 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onAkamai Technologies
Email byAmazon SES
Secured byDigiCert
Registered withMarkMonitor Inc.
Also usesGoogle Search ConsoleFacebook/Meta
1 subdomain · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat turbotax.com actually stands on - every host below is a signed observation
turbotax.com
A / AAAA
104.94.122.3
Akamai Technologiesserves the site
NS
a7-66.akam.neta11-64.akam.neta24-67.akam.neta1-182.akam.net+6 more
akam.net + nsone.netanswers its DNS
MX
mx1.intuit.iphmx.commx2.intuit.iphmx.com
Amazon SESreceives its email
TLS
turbotax-prod.intuit.com
DigiCert Incissued its certificate

DNS Records

A 1

  • 104.94.122.3

MX 2

  • 5mx1.intuit.iphmx.com
  • 5mx2.intuit.iphmx.com

TXT 9

  • MS=ms47404102
  • v=spf1 include:spf-int-net.intuit.com include:_spf1.intuit.com include:amazonses.com ?all
  • google-site-verification=IDhoCd14Zt2Mq1fL212rt0x7fhghwH5dSZgpM78z3FE
  • tvzz7pfc26xjt9j7j8n9y37884rb9mw6
  • facebook-domain-verification=x54mgoks6ehg6s08k6j3y241yjn49a
  • spycloud-domain-verification=0d06c181-d2ab-436d-8b5b-fc1c304513c4
  • zscaler-verification-42108621-16102025-yfJ8pq
  • google-site-verification=qYTLc6Kc3G6uVe2ZGiOZBPS_Gvk9f6TU1K57o1bCW6M
  • v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;fo=1

NS 10

  • a7-66.akam.net
  • a11-64.akam.net
  • a24-67.akam.net
  • a1-182.akam.net
  • a6-66.akam.net
  • a18-64.akam.net
  • dns1.p01.nsone.net
  • dns2.p01.nsone.net
  • dns3.p01.nsone.net
  • dns4.p01.nsone.net

SOA 1

  • dns1.p08.nsone.net nadmin.intuit.com

CAA 3

  • issue "amazon.com"
  • issue "digicert.com"
  • iodef "mailto:Tech-PINetworkServiceOperations@intuit.com"

TLS Certificates (2)

Common NameIssuerExpires
turbotax-prod.intuit.com C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1 Tue, 03 Nov 2026 23:59:59 +0000
DigiCert Global G3 TLS ECC SHA384 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G3 Sun, 13 Apr 2031 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for turbotax.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for turbotax.com <a href="https://domaindrift.io/t/turbotax.com"> <img src="https://domaindrift.io/badge/turbotax.com.svg" width="300" height="64" alt="DomainDrift signed observations for turbotax.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_0df3d3175efe489d
Output Hash
266af451dd152e781910acc467da5d8e78f45b499ff0e387a0ccb52f8d062513
Signature
ed25519:e3c8b6e7d05dcf06ee322b5e19f389e297fd0c6e2a7dd6dd5a650c1b07f3bb0dc961c07cf6b291416e4f4fae2730563111012ec6290da77f4d2fd496ba56fb0a
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser