CONTINUOUS INTERNET TELEMETRY24H DRIFT1,069 material changesacross 934 domains · +615 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW236 curated domains not answering-1,979 vs yesterdayERRORS1,737 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED6,701 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,069 material changesacross 934 domains · +615 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW236 curated domains not answering-1,979 vs yesterdayERRORS1,737 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED6,701 throttled or blocked our scanner429 rate-limit / 403 bot-block

modsecurity.org

Observed 2026-07-17T13:03:34.392276405+00:00 (3h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Secured byGoogle Trust Services
Registered withGoDaddy.com, LLC
IPv6 · tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat modsecurity.org actually stands on - every host below is a signed observation
modsecurity.org
A / AAAA
104.20.46.137172.66.146.922606:4700:10::6814:2e892606:4700:10::ac42:925c
Cloudflareserves the site
NS
fay.ns.cloudflare.comwest.ns.cloudflare.com
cloudflare.comanswers its DNS
TLS
modsecurity.org
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 104.20.46.137
  • 172.66.146.92

AAAA 2

  • 2606:4700:10::6814:2e89
  • 2606:4700:10::ac42:925c

NS 2

  • fay.ns.cloudflare.com
  • west.ns.cloudflare.com

SOA 1

  • fay.ns.cloudflare.com dns.cloudflare.com

CAA 10

  • issue "comodoca.com"
  • issue "digicert.com; cansignhttpexchanges=yes"
  • issue "letsencrypt.org"
  • issue "pki.goog; cansignhttpexchanges=yes"
  • issue "ssl.com"
  • issuewild "comodoca.com"
  • issuewild "digicert.com; cansignhttpexchanges=yes"
  • issuewild "letsencrypt.org"
  • issuewild "pki.goog; cansignhttpexchanges=yes"
  • issuewild "ssl.com"

TLS Certificates (3)

Common NameIssuerExpires
modsecurity.org C=US, O=Google Trust Services, CN=WE1 Sat, 29 Aug 2026 06:28:50 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for modsecurity.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for modsecurity.org <a href="https://domaindrift.io/t/modsecurity.org"> <img src="https://domaindrift.io/badge/modsecurity.org.svg" width="300" height="64" alt="DomainDrift signed observations for modsecurity.org"> </a>

Ed25519 Receipt

Receipt ID
a4ccef03-b4f5-40e5-953b-a36d6fc9f341
Output Hash
5ee02005bf6498093c8db29a784c9f67ae73702597e5fa054ebc6a31cc391001
Signature
ed25519:7ddd6a0f04eec4e3104bd2d51e3ad67fa5940cc702e9bb08577870f5189ba0994ce928552dc81662c679390fd5f8ad60d6682953a32c26e36a3ba61d877c7901
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser