CONTINUOUS INTERNET TELEMETRY24H DRIFT199 material changesacross 159 domains · -459 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,836 curated domains not answering+1,007 vs yesterdayERRORS24,896 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED70,653 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT199 material changesacross 159 domains · -459 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,836 curated domains not answering+1,007 vs yesterdayERRORS24,896 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED70,653 throttled or blocked our scanner429 rate-limit / 403 bot-block

sourcefire.com

Observed Jul 18, 2026, 12:51 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Email byGoogle Workspace
Secured byIdenTrust
Registered withGandi SAS
IPv6 · 1 subdomain · tranco_10k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat sourcefire.com actually stands on - every host below is a signed observation
sourcefire.com
A / AAAA
198.148.79.592620:28:c000:0:aba:ca:daba:59
2620serves the site
NS
ns-1386.awsdns-45.orgns-166.awsdns-20.comns-1884.awsdns-43.co.ukns-885.awsdns-46.net
awsdns-45.org + awsdns-20.com + moreanswers its DNS
MX
aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
www.sourcefire.com
IdenTrustissued its certificate

DNS Records

A 1

  • 198.148.79.59

AAAA 1

  • 2620:28:c000:0:aba:ca:daba:59

MX 5

  • 1aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 4

  • QuoVadis=243f41ea-ee3d-4d2d-bcb2-d349f31c7735
  • identrust_validate=FGoSuNdd9WWq5OaGi0sv28xHKyY0v3JxnEMCDC+Wuudq
  • v=spf1 include:spf.sourcefire.com include:mktomail.com include:sendgrid.net include:amazonses.com include:_spf.google.com ~all
  • v=DMARC1; p=reject; pct=100; sp=none; fo=1; ri=3600; rua=mailto:ynldvgsr@ag.dmarcian.com; ruf=mailto:ynldvgsr@fr.dmarcian.com;

NS 4

  • ns-1386.awsdns-45.org
  • ns-166.awsdns-20.com
  • ns-1884.awsdns-43.co.uk
  • ns-885.awsdns-46.net

SOA 1

  • ns-885.awsdns-46.net awsdns-hostmaster.amazon.com

SRV 5

  • alt1.xmpp-server.l.google.com:5269 p20
  • alt2.xmpp-server.l.google.com:5269 p20
  • alt3.xmpp-server.l.google.com:5269 p20
  • alt4.xmpp-server.l.google.com:5269 p20
  • xmpp-server.l.google.com:5269 p5

TLS Certificates (3)

Common NameIssuerExpires
www.sourcefire.com C=US, O=IdenTrust, 2.5.4.11=HydrantID Trusted Certificate Service, CN=HydrantID Server CA O1 Mon, 11 Jan 2027 08:34:06 +0000
HydrantID Server CA O1 C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1 Wed, 12 Dec 2029 16:56:15 +0000
IdenTrust Commercial Root CA 1 C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1 Mon, 16 Jan 2034 18:12:23 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for sourcefire.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for sourcefire.com <a href="https://domaindrift.io/t/sourcefire.com"> <img src="https://domaindrift.io/badge/sourcefire.com.svg" width="300" height="64" alt="DomainDrift signed observations for sourcefire.com"> </a>

Ed25519 Receipt

Receipt ID
93205bbc-3f6c-4d22-ae2e-8d92a7df6182
Output Hash
35b72c77ebdfec92f90ab57543d0d89fdf71ce3696356e4f401fbc951f302240
Signature
ed25519:e3655721e2e85c552dbcfc22c8c32f3e5a015072efeca4f02dbd39863b2e855394fd871e2f4982640f53a99e38876b5b8b38aa248375cb9dbbe73eaf78ff690f
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser