CONTINUOUS INTERNET TELEMETRY24H DRIFT8,114 material changesacross 7,708 domains · last 24h · -2,301 vs yesterdayDNS DRIFT497 domains changed DNS providertop destination cloudflare.com · -162 vs yesterdayEMAIL DRIFT123 domains switched email providertop destination google.com · -44 vs yesterdayCERT DRIFT162 domains switched issuing CA24h · -57 vs yesterdayNOW480 curated domains not reachable-223 vs yesterdaySITE ERRORS17,390 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,836 sites429 rate-limit / 403 bot-block, a posture signal

sfmta.com

Observed Jul 24, 2026, 01:18 UTC (4h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onFastly
Email byMicrosoft 365
Secured byLet's Encrypt
Registered withCSC Corporate Domains, Inc.
Also usesDocuSignGoogle Search ConsoleAtlassian
IPv6 · 1 subdomain · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat sfmta.com actually stands on - every host below is a signed observation
sfmta.com
A / AAAA
23.185.0.22620:12a:8000::22620:12a:8001::2
Fastlyserves the site
NS
ns1-06.azure-dns.comns2-06.azure-dns.netns3-06.azure-dns.orgns4-06.azure-dns.info
azure-dns.com + azure-dns.net + moreanswers its DNS
MX
sfmta-com.mail.protection.outlook.com
Microsoft 365receives its email
TLS
sfmta.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 23.185.0.2

AAAA 2

  • 2620:12a:8000::2
  • 2620:12a:8001::2

MX 1

  • 0sfmta-com.mail.protection.outlook.com

TXT 15

  • /Rx7ZgIdwetuB7Axp+cZmYCMLg+imcxbS/jzQTzkzbVqWXDeFduJkC9Ksj4Z2ViW+mSd698pXy2uQxhXGYPrFQ==
  • apple-domain-verification=pWq1cAIbOD9m8Nuo
  • docusign=7f3c20e7-0e15-4842-ba4b-e96cb64c154a
  • google-site-verification=Ki3_RxKt3tEWxogHu1nlMqyGn0KAEEy2ekiKZey1Bbs
  • adobe-idp-site-verification=1c5c0dca7baca33b2e644ba9d6e0c7861f821c8ef1f628eec570fe6240a050c9
  • onetrust-domain-verification=e28986be9a7d40369e824d1b505553a2
  • atlassian-domain-verification=o9vh2dpJpiQGnE9NyTGWwuZLfwp74Ksv0vCFhv0WaDdwcmbyDUxy2muJPAqRJAq4
  • v=spf1 ip4:75.10.230.1 ip4:75.10.230.180 ip4:75.10.230.181 ip4:192.190.32.202 include:spf.protection.outlook.com include:_spf.alchemer.com include:_spf.salesforce.com include:_spf.psm.knowbe4.com include:spf-008a4301.pphosted.com include:spf-008a4302.pphosted.com include:everbridge.net ~all
  • MS=ms46368357
  • MS=ms30300272

NS 4

  • ns1-06.azure-dns.com
  • ns2-06.azure-dns.net
  • ns3-06.azure-dns.org
  • ns4-06.azure-dns.info

SOA 1

  • ns1-06.azure-dns.com azuredns-hostmaster.microsoft.com

SRV 2

  • xmpp.sfmta.com:5269 p5
  • autodiscover.sfmta.com:443 p10

TLS Certificates (3)

Common NameIssuerExpires
sfmta.com C=US, O=Let's Encrypt, CN=YR2 Thu, 03 Sep 2026 15:09:00 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for sfmta.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for sfmta.com <a href="https://domaindrift.io/t/sfmta.com"> <img src="https://domaindrift.io/badge/sfmta.com.svg" width="300" height="64" alt="DomainDrift signed observations for sfmta.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_c9279903f02bb643
Output Hash
1d153098eea01a8910a846225c2b0143a6da484b6453125bcaa7bdc06759de44
Signature
ed25519:05893ed333eb29cf518defbc25593d764988ba38279f57ffb66faa368db6f66a8cc23c94976a00df205f852ebf70248c838783a6ff6a0918824657f4d5e3fc06
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser