shadowserver.org

Observed Jul 22, 2026, 00:16 UTC (4h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onAkamai International B.V

Secured bySectigo

Registered withGoDaddy.com, LLC

Also usesGoogle Search Console

2 subdomains · tranco_20k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat shadowserver.org actually stands on - every host below is a signed observation

shadowserver.org

A / AAAA

103.41.71.79

Akamai International B.Vserves the site

ns3.shadowserver.orgns2.shadowserver.orgns1.shadowserver.org

shadowserver.organswers its DNS

mx2.shadowserver.orgmail.shadowserver.org

shadowserver.orgreceives its email

TLS

shadowserver.org

Sectigo Limitedissued its certificate

DNS Records

A 1

103.41.71.79

MX 2

20mx2.shadowserver.org
10mail.shadowserver.org

TXT 6

google-site-verification=tiVxSpYg2xBbmxJY9KRvIqRhw4CN6v-Tw9cU5V04gJ4
MS=67DB28A53B2115CEBD50B67E69C7B086BDAFB8DA
v=spf1 ip4:154.9.2.12 ip4:65.49.51.50 ~all
v=DMARC1; p=quarantine; rua=mailto:dmarc@shadowserver.org; ruf=mailto:dmarc-stats@shadowserver.org; pct=100
v=DMARC1; p=quarantine; rua=mailto:dmarc@shadowserver.org; ruf=mailto:dmarc-stats@shadowserver.org; pct=100
v=STSv1; id=20250903001

NS 3

ns3.shadowserver.org
ns2.shadowserver.org
ns1.shadowserver.org

SOA 1

ns1.shadowserver.org root.shadowserver.org

TLS Certificates (4)

Common Name	Issuer	Expires
`shadowserver.org`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36	Tue, 02 Feb 2027 23:59:59 +0000
`Sectigo Public Server Authentication CA DV R36`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46	Fri, 21 Mar 2036 23:59:59 +0000
`USERTrust RSA Certification Authority`	C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority	Mon, 18 Jan 2038 23:59:59 +0000
`Sectigo Public Server Authentication Root R46`	C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority	Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for shadowserver.org. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/shadowserver.org">
  <img src="https://domaindrift.io/badge/shadowserver.org.svg"
       width="300" height="64" alt="DomainDrift signed observations for shadowserver.org">
</a>

Ed25519 Receipt

Receipt ID: rcpt_81406ea756bce154
Output Hash: e89dd83e26463e4009e6c8d50c59075d02a106292a1b1a992a8d0d5c1c44ee4a
Signature: ed25519:016e197d16e769c0164c302e2775cf33b24bcc2fd8469952b4b6c3f7539144aba7200c44cd9ea81c06a4a43b0c03f6da1b535774255d809a468d8ebb23fb5e08
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/shadowserver.org