CONTINUOUS INTERNET TELEMETRY24H DRIFT8,943 material changesacross 8,530 domains · last 24h · -1,472 vs yesterdayDNS DRIFT551 domains changed DNS providertop destination cloudflare.com · -108 vs yesterdayEMAIL DRIFT133 domains switched email providertop destination google.com · -34 vs yesterdayCERT DRIFT185 domains switched issuing CA24h · -34 vs yesterdayNOW475 curated domains not reachable-228 vs yesterdaySITE ERRORS17,388 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,855 sites429 rate-limit / 403 bot-block, a posture signal

nih.gov

Observed Jul 24, 2026, 02:39 UTC (1h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Registered withget.gov
Also usesDocuSignDockerMiroGoogle Search ConsoleAtlassian
healthcare
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat nih.gov actually stands on - every host below is a signed observation
nih.gov
A / AAAA
156.40.212.210
Cloudflareserves the site
NS
ns.nih.govns2.nih.govns3.nih.gov
nih.govanswers its DNS
MX
nihcesxway3.hub.nih.govnihcesxway4.hub.nih.govnihcesxway5.hub.nih.govnihcesxway6.hub.nih.gov+4 more
nih.govreceives its email

DNS Records

A 1

  • 156.40.212.210

MX 8

  • 10nihcesxway3.hub.nih.gov
  • 10nihcesxway4.hub.nih.gov
  • 10nihcesxway5.hub.nih.gov
  • 10nihcesxway6.hub.nih.gov
  • 10nihcesxwayst03.hub.nih.gov
  • 10nihcesxwayst04.hub.nih.gov
  • 10nihcesxwayst05.hub.nih.gov
  • 10nihcesxwayst06.hub.nih.gov

TXT 64

  • da1dfl8ipaafpqsh40iiuubf7n
  • f71j9q2oprakr7gtedlcau485k
  • pbj2k0thl8k6bc1b5igtqqghls
  • rh426i3oiis217bktj8o4nd2m2
  • sv6eiguevqe64cojov3psnedd2
  • uub8i3goc70aj1kvl0neuhle5v
  • dv-ToPuPeiy2ojjpiSg4wlEEaJe
  • 0d03wt1mlg5wy8z9pv9pv0rj21pc6137
  • _0i392yrtc0z5vy7dpsmgeoukvw7bysw
  • _ai4lciv17rnka4jdu9z7ft5dkdn6cwi

NS 3

  • ns.nih.gov
  • ns2.nih.gov
  • ns3.nih.gov

SOA 1

  • nihblox6.nih.gov hostmaster.nih.gov

SRV 3

  • nihvideoexternal3.nih.gov:5060 p10
  • nihvideoexternal3.nih.gov:5061 p10
  • sip.nih.gov:5269 p0

CAA 15

  • issue "amazon.com"
  • issue "digicert.com"
  • issue "entrust.net"
  • issue "globalsign.com"
  • issue "godaddy.com"
  • issue "identrust.com"
  • issue "letsencrypt.org"
  • issue "sectigo.com"
  • issuewild "amazon.com"
  • issuewild "digicert.com"

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nih.gov. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for nih.gov <a href="https://domaindrift.io/t/nih.gov"> <img src="https://domaindrift.io/badge/nih.gov.svg" width="300" height="64" alt="DomainDrift signed observations for nih.gov"> </a>

Ed25519 Receipt

Receipt ID
rcpt_a52c0e92f19e56f9
Output Hash
5bf8d2dd41d9fd024b2dc4140a96d3e1936e95a195be1d8159f829614a98bdfc
Signature
ed25519:472bc49f0175ceaaad05a41f2413fe75c47fee76d7af5c89231d146c0d5ef5f8d916ef92801f3970c3a0cd24a66047a4e23ea319bc7f335be3b229e84f32d80a
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser