CONTINUOUS INTERNET TELEMETRY24H DRIFTat least 33,164 material changesacross 32,594+ domains · 24h to ~5h ago · a floor, 19h of 24 walkedNOW563 curated domains not reachablelast probe, steadySITE ERRORS34,391 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 156,592 sites429 rate-limit / 403 bot-block, a posture signal

upstreamsecurity.net

Observed Jul 25, 2026, 17:56 UTC (8d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Up right now
Email byMicrosoft 365
Secured byLet's Encrypt
Also usesGoogle Search Console
tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat upstreamsecurity.net actually stands on - every host below is a signed observation
upstreamsecurity.net
A / AAAA
198.185.159.144198.185.159.145198.49.23.144198.49.23.145
unattributedserves the site
NS
pdns13.domaincontrol.compdns14.domaincontrol.com
domaincontrol.comanswers its DNS
MX
upstreamsecurity-net.mail.protection.outlook.com
Microsoft 365receives its email
TLS
upstreamsecurity.net
Let's Encryptissued its certificate

DNS Records

A 4

  • 198.185.159.144
  • 198.185.159.145
  • 198.49.23.144
  • 198.49.23.145

MX 1

  • 0upstreamsecurity-net.mail.protection.outlook.com

TXT 6

  • p71r87nmcsfbzy6xt522btbr54lh7d62
  • _ssvn6aregg0hka2cy8hdl6lt1a4er9e
  • google-site-verification=8mB3JBHhtGxOvT53xUxfzyyzbhlZMAG4k0HXmRU9d-M
  • v=spf1 IP4:50.145.4.0/24 IP4:38.99.86.32 IP4:43.228.187.180 IP4:38.99.86.33 IP4:38.99.86.34 IP4:38.99.86.35 IP4:38.99.86.36 IP4:38.99.86.37 IP4:38.99.86.38 IP4:38.99.86.40 IP4:38.99.86.41 IP4:38.99.86.42 IP4:38.99.86.43 IP4:38.99.86.45 IP4:38.99.86.50 IP4:38.99.86.51 IP4:38.99.86.52 IP4:38.99.86.53 IP4:38.99.86.54 IP4:38.99.86.55 IP4:38.99.86.56 IP4:38.99.86.57 IP4:38.99.86.58 IP4:38.99.86.59 IP4:38.99.86.60 IP4:38.99.86.61 IP4:38.99.86.62 IP4:38.99.86.63 -all
  • v=DMARC1; p=none; rua=mailto:t0bqws7o4x@rua.director.tangent.com; ruf=mailto:t0bqws7o4x@ruf.director.tangent.com; fo=1;
  • v=STSv1; id=20241127190231639340;

NS 2

  • pdns13.domaincontrol.com
  • pdns14.domaincontrol.com

SOA 1

  • pdns13.domaincontrol.com dns.jomax.net

TLS Certificates (3)

Common NameIssuerExpires
upstreamsecurity.net C=US, O=Let's Encrypt, CN=YR1 Fri, 09 Oct 2026 12:36:52 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for upstreamsecurity.net. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for upstreamsecurity.net <a href="https://domaindrift.io/t/upstreamsecurity.net"> <img src="https://domaindrift.io/badge/upstreamsecurity.net.svg" width="300" height="64" alt="DomainDrift signed observations for upstreamsecurity.net"> </a>

Ed25519 Receipt

Receipt ID
rcpt_24ea8d7195bfd7f8
Output Hash
bb65daecb81f48e692ab1bb9a19fdf94a6bbc84069b1ae6bbfde8124937ef49a
Signature
ed25519:47839b4e8e1b791e8754a57f230479611c440cbd8983bb550a546b23dfe9be86e211c14c850bcfa38408bbd51c5bf9c35b988bfd621de53c511e441133f5c907
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser