highLookout
A new "staging" subdomain appeared on nds.gov→Preview and staging names surface in public certificate logs — often before anything launches.
A public record of who runs the federal web — and what quietly changes when no one is looking.
Daylight reads already-public data — the federal .gov ownership registry, certificate transparency logs, live page source — and keeps a timestamped, source-linked record of it. Reporters can subscribe to a name; anyone can ask who owns a .gov and whether it’s watching them.
1,319domains watched14,077changes recorded5modules livescope: apex .gov
daylight · what we’re seeing
A rotating look at what Daylight has noticed lately, in plain language — each observation drawn straight from public data, with a link to the full, timestamped finding.
highLedger
usadf.gov's security contact is an address at ndstudio.gov, outside the agency→The security contact receives vulnerability reports; an address outside the agency is worth noting.
notableReceipts
e-verify.gov quietly removed a tracker (Google Ads)→A tracker that was present and then vanished leaves no public trace — unless someone kept the receipt.
daylight · what it watches
Ledger→
Who owns each federal .gov, and every change to the record.
Lookout→
New subdomains the day their certificate is issued.
Foundry→
Which build vendors quietly serve many agencies at once — and what's staged but not yet launched.
Floodlight→
Is this .gov tracking you? Trackers, session replay, and tracking disguised as the site's own traffic.
Receipts→
What quietly disappeared — a dated, archived removal ledger.
changes · most recent
System status →Nov 5, 20269 changes
- notable
- notable
- notable
- notable
- notable
- notable
- info
- notable
- notable