CONTINUOUS INTERNET TELEMETRY24H DRIFT2,833 material changesacross 2,517 domains · -565 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,330 curated domains not answering-6,388 vs yesterdayERRORS10,946 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,833 material changesacross 2,517 domains · -565 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,330 curated domains not answering-6,388 vs yesterdayERRORS10,946 responded with an errorlast probe · 5xx / 404 / 429 / 403

buf.build

Observed 2026-07-13T00:04:38.363424638+00:00 (15h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onGoogle
Email byGoogle Workspace
Secured byGoogle Trust Services
Also usesZoomGoogle Search ConsoleLinearStripeHubSpot
1 subdomain · saas
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat buf.build actually stands on - every host below is a signed observation
buf.build
A / AAAA
34.95.71.106
Googleserves the site
NS
rosemary.ns.cloudflare.comtony.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
buf.build
Google Trust Servicesissued its certificate

DNS Records

A 1

  • 34.95.71.106

MX 5

  • 1aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 17

  • B997BD242A
  • MS=ms40326687
  • OSSRH-84676
  • ZOOM_verify_tNPqhddwpXox0zf4Eclck7
  • _gzlouu2guf68olrwwq0s94geej4ff12
  • anthropic-domain-verification-53edjt=MQ72mrdHu0iyqLC6hjd4sU3wZ
  • apple-domain-verification=uFHzTjAuMQqmvmeJ
  • cursor-domain-verification-nr2khg=zXW8kPNUhjs6YQg0xBjLj9pdB
  • google-site-verification=lycZSscFSeDJpzUM9BNZQgMEAiURSrjA12XxldAQsUA
  • jetbrains-domain-verification=dusacr8g1qgfavwytsodypi51

NS 2

  • rosemary.ns.cloudflare.com
  • tony.ns.cloudflare.com

SOA 1

  • rosemary.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common NameIssuerExpires
buf.build C=US, O=Google Trust Services, CN=WR3 Sat, 19 Sep 2026 00:46:30 +0000
WR3 C=US, O=Google Trust Services LLC, CN=GTS Root R1 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R1 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for buf.build. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for buf.build <a href="https://domaindrift.io/t/buf.build"> <img src="https://domaindrift.io/badge/buf.build.svg" width="300" height="64" alt="DomainDrift signed observations for buf.build"> </a>

Ed25519 Receipt

Receipt ID
3a26c921-5fe2-4a8c-97d1-a5f963bd59bc
Output Hash
4cc462f017891f4bfa4496fb533cac97b971635539266da72397de256dbcda34
Signature
ed25519:8edf521f06584bc18f5525d24b8ff096773b490b5ec7c5dc1d7d37459bec5d3d3411daabbe90799e7eeea159bb2f1d5213953ba63fb16aff076ed14f447fe109
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser