CONTINUOUS INTERNET TELEMETRY24H DRIFT2,952 material changesacross 2,600 domains · -446 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination h-email.net · -4 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,956 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,952 material changesacross 2,600 domains · -446 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination h-email.net · -4 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,956 responded with an errorlast probe · 5xx / 404 / 429 / 403

20m.com

Observed 2026-07-12T13:31:59.427Z (21h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Registered withGoDaddy.com, LLC
1 subdomain · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat 20m.com actually stands on - every host below is a signed observation
20m.com
A / AAAA
209.33.220.49
Cloudflareserves the site
NS
ns1.sj1.northsky.comns2.sj1.northsky.com
northsky.comanswers its DNS
MX
mx-ws.dca.untd.commx-ws.vgs.untd.com
untd.comreceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time237 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 209.33.220.49

MX 2

  • 10mx-ws.dca.untd.com
  • 10mx-ws.vgs.untd.com

NS 2

  • ns1.sj1.northsky.com
  • ns2.sj1.northsky.com

SOA 1

  • ns1.sj1.northsky.com.20m.com dns.20m.com

TLS Certificates (0)

None.

Subdomains (95)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for 20m.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for 20m.com <a href="https://domaindrift.io/t/20m.com"> <img src="https://domaindrift.io/badge/20m.com.svg" width="300" height="64" alt="DomainDrift signed observations for 20m.com"> </a>

Ed25519 Receipt

Receipt ID
42719e1c-c02f-417c-a6bd-21176092f9e4
Output Hash
0c2d8b2743985550975f2d47f3df2f46ba42dcd1eeb13c8356294892a062fcfb
Signature
ed25519:f77a5955f0d6e0eb36edeb5c8534c40dda416b8e51603affc7ca9d3f018e28b0af9ba266d153a5c6dfa222a0539fc1ed44e903f698be221eb3f014b41460b10d
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser