CONTINUOUS INTERNET TELEMETRY24H DRIFT134 material changesacross 86 domains · -524 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bg · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW4,285 curated domains not answering+1,456 vs yesterdayERRORS27,763 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED82,740 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT134 material changesacross 86 domains · -524 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bg · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW4,285 curated domains not answering+1,456 vs yesterdayERRORS27,763 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED82,740 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

bighappy.co

Observed Jul 18, 2026, 13:49 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Also usesGoogle Search ConsoleHubSpot
9 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat bighappy.co actually stands on - every host below is a signed observation
bighappy.co
A / AAAA
198.202.211.1
Cloudflareserves the site
NS
ns-1283.awsdns-32.orgns-1998.awsdns-57.co.ukns-273.awsdns-34.comns-995.awsdns-60.net
awsdns-32.org + awsdns-57.co.uk + moreanswers its DNS
MX
alt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.bighappy.co/
HTTP status301
Servercloudflare
TLS protocolHTTP/3
TLS issuernot observed
Behind Cloudflareyes
Response time301 ms
DNS resolutionNOERROR
Redirect chain
https://www.bighappy.co/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 198.202.211.1

MX 5

  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com
  • 1aspmx.l.google.com

TXT 9

  • MS=ms47890495
  • MS=ms26830503
  • anthropic-domain-verification-f9abt3=tcOGEztnvxQEKWGN5m4PmooeN
  • google-site-verification=e2lAWh_go7dGNFL9gmkfHPMASPrny39NSEq7w9it-50
  • "_webflow
  • v=spf1 include:_spf.google.com include:50928182.spf08.hubspotemail.net ~all
  • MS=ms13990664
  • v=DMARC1; p=none; rua=mailto:frohli@bighappy.co; ruf=mailto:frohli@bighappy.co; sp=none; ri=259200
  • v=DKIM1; (detected)

NS 4

  • ns-1283.awsdns-32.org
  • ns-1998.awsdns-57.co.uk
  • ns-273.awsdns-34.com
  • ns-995.awsdns-60.net

SOA 1

  • ns-995.awsdns-60.net awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (9)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for bighappy.co. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for bighappy.co <a href="https://domaindrift.io/t/bighappy.co"> <img src="https://domaindrift.io/badge/bighappy.co.svg" width="300" height="64" alt="DomainDrift signed observations for bighappy.co"> </a>

Ed25519 Receipt

Receipt ID
37465520-8423-4ca8-a442-d4e8b9cc9f97
Output Hash
1f0df6e9a0b06ce01d5cc09bcb8202d89cdee50343f0f5b050eb8c769e494a98
Signature
ed25519:6ef258d98bedd7412327f4b9dda6d8e387ec595ccb8307221af8c733b4f2e875f15ae55f0061a9e2bba1662c3b0fed14cb360d6088664915cdf81702d19df104
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser