CONTINUOUS INTERNET TELEMETRY24H DRIFT231 material changesacross 34 domains · last 24h · +71 vs yesterdayNOW532 curated domains not reachable+30 vs yesterdaySITE ERRORS34,058 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 150,430 sites429 rate-limit / 403 bot-block, a posture signal

nhs.uk

Observed Jul 28, 2026, 22:34 UTC (8h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Up right now
Runs onMicrosoft Corporation
Email byMandrill (Mailchimp)
Secured byDigiCert
Registered withNominet UK
Also usesFacebook/MetaGoogle Search Console
healthcare
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat nhs.uk actually stands on - every host below is a signed observation
nhs.uk
A / AAAA
4.158.93.42
Microsoft Corporationserves the site
NS
ns1.nhs.ukns2.nhs.ukns3.nhs.ukns4.nhs.uk
nhs.ukanswers its DNS
MX
mail.nhs.uk
Mandrill (Mailchimp)receives its email
TLS
nhs.uk
DigiCert Incissued its certificate

DNS Records

A 1

  • 4.158.93.42

MX 1

  • 50mail.nhs.uk

TXT 8

  • 1.2.3.4
  • v=spf1 ip4:195.104.77.0/23 ip4:10.176.129.120 ip4:10.228.178.230 ip4:194.72.83.215 ip4:194.72.83.216 ip4:194.155.93.52/31 include:esa1.hc1668-91.c3s2.iphmx.com include:esa2.hc1668-91.c3s2.iphmx.com include:spf.protection.outlook.com include:_spf.nhs.net include:spf.mandrillapp.com -all
  • apple-domain-verification=NiFUi4F53AsxfAxv
  • facebook-domain-verification=lv7tnthk77oqcuocg7u86rnoafjj3z
  • google-site-verification=dwWXwcFQckdoNrWU_5siMlG_aXHlXMhkddd7xDehP5c
  • 64gp3t2128n6avl30cct29hmtq
  • _8qn8jz0octd5khtd2sv0ujib7m0zhc7.dcv.digicert.com
  • v=DMARC1; p=reject; sp=none;adkim=s;aspf=s;fo=1; rua=mailto:A-NE.postmaster@nhs.net,mailto:dmarc-rua@dmarc.service.gov.uk

NS 4

  • ns1.nhs.uk
  • ns2.nhs.uk
  • ns3.nhs.uk
  • ns4.nhs.uk

SOA 1

  • ns1.nhs.uk hostmaster.nominet.uk

TLS Certificates (3)

Common NameIssuerExpires
nhs.uk C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 Sat, 16 Jan 2027 23:59:59 +0000
DigiCert Global G2 TLS RSA SHA256 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Sat, 29 Mar 2031 23:59:59 +0000
DigiCert Global Root G2 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Fri, 15 Jan 2038 12:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nhs.uk. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for nhs.uk <a href="https://domaindrift.io/t/nhs.uk"> <img src="https://domaindrift.io/badge/nhs.uk.svg" width="300" height="64" alt="DomainDrift signed observations for nhs.uk"> </a>

Ed25519 Receipt

Receipt ID
rcpt_f11a6a9fbabd3248
Output Hash
a3da8f63bf9cda76d321a58c1d9525307fad5c5f59435f9c3d49e5a5ec16d436
Signature
ed25519:50daf86de47b97eccb6fa22663634387099a9579f19904da4e6e043b1cabaad98492cc54ee0596c972d5eeed008c1ef27fd50a63504362a7421ed28460342208
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser