CONTINUOUS INTERNET TELEMETRY24H DRIFT1,840 material changesacross 1,647 domains · +418 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination yandexcloud.net · -19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -4 vs yesterdayNOW1,164 curated domains not answering+454 vs yesterdayERRORS5,302 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,705 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,840 material changesacross 1,647 domains · +418 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination yandexcloud.net · -19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -4 vs yesterdayNOW1,164 curated domains not answering+454 vs yesterdayERRORS5,302 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,705 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

bsky.app

Observed 2026-07-18T04:28:01.941Z (6h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Also usesGoogle Search Console
5 subdomains · tranco_1k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat bsky.app actually stands on - every host below is a signed observation
bsky.app
A / AAAA
3.150.232.43.151.139.2523.140.40.208
Cloudflareserves the site
NS
ns-757.awsdns-30.netns-372.awsdns-46.comns-2001.awsdns-58.co.ukns-1425.awsdns-50.org
awsdns-30.net + awsdns-46.com + moreanswers its DNS
MX
aspmx.l.google.com
Google Workspacereceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time272 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 3

  • 3.150.232.4
  • 3.151.139.252
  • 3.140.40.208

MX 1

  • 1aspmx.l.google.com

TXT 5

  • v=spf1 mx include:mail.zendesk.com ?all
  • google-site-verification=YglIh7PA59zIzMTb-hrvNHZK8WpGjJLXWbMKof6OhR8
  • google-site-verification=Y85ssVszowlKMCTQtWZoqCWH4x_2sV7NCCa7BlGJpiw
  • google-site-verification=ppFonct21Z0sM_XgszQxPAJlnwgjeDzx8Qi3xnN3FAI
  • v=DMARC1; p=reject; rua=mailto:admin@bsky.app;

NS 4

  • ns-757.awsdns-30.net
  • ns-372.awsdns-46.com
  • ns-2001.awsdns-58.co.uk
  • ns-1425.awsdns-50.org

SOA 1

  • ns-2001.awsdns-58.co.uk awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (5)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for bsky.app. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for bsky.app <a href="https://domaindrift.io/t/bsky.app"> <img src="https://domaindrift.io/badge/bsky.app.svg" width="300" height="64" alt="DomainDrift signed observations for bsky.app"> </a>

Ed25519 Receipt

Receipt ID
707e896a-a56f-4671-800e-729c4f5a398e
Output Hash
89ddb21b0d27182eff680985e44b934ba5919cac47687200bc36a5dc2aa8fa81
Signature
ed25519:eb976559d597c8ecd260a5fdeac28be7e282bc8a2b128313975c0d5ea15e4f76abf7211fa088dad308f837d0d996d10cf8e37ac2be89e2f40a36689553265203
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser