CONTINUOUS INTERNET TELEMETRY24H DRIFT130 material changesacross 86 domains · -528 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bg · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW4,267 curated domains not answering+1,438 vs yesterdayERRORS27,679 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED82,136 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT130 material changesacross 86 domains · -528 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bg · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW4,267 curated domains not answering+1,438 vs yesterdayERRORS27,679 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED82,136 throttled or blocked our scanner429 rate-limit / 403 bot-block

wta.org

Observed Jul 20, 2026, 01:11 UTC (22h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Also usesGoogle Search Console
IPv6 · 96 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat wta.org actually stands on - every host below is a signed observation
wta.org
A / AAAA
104.26.8.170172.67.70.18104.26.9.1702606:4700:20::681a:8aa+2 more
Cloudflareserves the site
NS
ruth.ns.cloudflare.comken.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
aspmx2.googlemail.comaspmx3.googlemail.comalt1.aspmx.l.google.comaspmx.l.google.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.wta.org/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time55 ms
DNS resolutionNOERROR
Redirect chain
https://www.wta.org/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 3

  • 104.26.8.170
  • 172.67.70.18
  • 104.26.9.170

AAAA 3

  • 2606:4700:20::681a:8aa
  • 2606:4700:20::681a:9aa
  • 2606:4700:20::ac43:4612

MX 5

  • 40aspmx2.googlemail.com
  • 50aspmx3.googlemail.com
  • 20alt1.aspmx.l.google.com
  • 10aspmx.l.google.com
  • 30alt2.aspmx.l.google.com

TXT 9

  • v=spf1 mx a ip4:103.28.42.0/24 ip4:146.88.28.0/24 ip4:163.47.180.0/22 ip4:203.55.21.0/24 ip4:204.75.142.0/24 ip4:27.126.146.0/24 ip4:66.231.93.0/24 ip4:192.81.130.35 ip4:50.116.4.87 ip6:2600:3c01::f03c:91ff:fe6e:138d/64 ip4:64.132.92.0/24 ip4:64.132.88.0/23 ip4:66.231.80.0/20 ip4:68.232.192.0/20 ip4:199.122.120.0/21 ip4:207.67.38.0/24 ip4:128.17.0.0/20 ip4:128.17.64.0/20 ip4:128.17.128.0/20 ip4:128.17.192.0/20 ip4:128.245.0.0/20 ip4:128.245.64.0/20 ip4:13.111.191.0/24 ip4:128.245.242.0/24 ip4:128.245.243.0/24 ip4:128.245.244.0/24 ip4:128.245.245.0/24 ip4:128.245.246.0/24 ip4:128.245.247.0/24 ip4:128.245.176.0/20 ip4:136.147.224.0/20 ip4:207.67.98.192/27 ip4:207.250.68.0/24 ip4:209.43.22.0/28 ip4:198.245.80.0/20 ip4:136.147.128.0/20 ip4:136.147.176.0/20 ip4:13.111.0.0/16 ip4:161.71.32.0/19 ip4:161.71.64.0/20 ip4:13.110.208.0/21 ip4:13.110.216.0/22 ip4:13.110.224.0/20 ip4:159.92.157.0/24 ip4:159.92.158.0/24 ip4:159.92.159.0/24 ip4:159.92.160.0/24 ip4:159.92.161.0/24 ip4:159.92.162.0/24 ip4:159.92.154.0/24 ip4:1...[truncated]
  • google-site-verification=rfC0WdN4C0o6MxMAIQ4K_TkulDkZTnkkvZvSzS03M6o
  • intacct-esk=DFC3FDCB69C3AE15E0538C220D0A99C5
  • google-site-verification=VR-bbMLMJUSQf9j3WgNWQOnRcVmXb_zStuZam8xGuRs
  • val2d8378rt1f4rlj3nub8pag4
  • MS=8F8ECDDC5731934199C255947490A83C8C0DCB86
  • MS=ms80500485
  • v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:dmarc-reports@wta.org; rf=afrf; pct=100; ri=86400; fo=1; ruf=mailto:dmarc-reports@wta.org
  • v=DKIM1; (detected)

NS 2

  • ruth.ns.cloudflare.com
  • ken.ns.cloudflare.com

SOA 1

  • ken.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (96)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for wta.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for wta.org <a href="https://domaindrift.io/t/wta.org"> <img src="https://domaindrift.io/badge/wta.org.svg" width="300" height="64" alt="DomainDrift signed observations for wta.org"> </a>

Ed25519 Receipt

Receipt ID
4a146d1b-f7fb-4707-83d4-87603fc93ae6
Output Hash
890bc7ba12011b84b6c66027d1c9b3683e5058bb85a9254c9d64c049fb7a7d42
Signature
ed25519:458a0843859be57af7ae78ed36fa497ccaff76e47d6ce4910acb85e17fac16e3cfbc0fce89867940a6dbbb33d85edd98dd660b93780906407d8be4987d42660d
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser