CONTINUOUS INTERNET TELEMETRY24H DRIFT114 material changesacross 80 domains · -544 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW4,179 curated domains not answering+1,350 vs yesterdayERRORS27,157 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED80,563 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT114 material changesacross 80 domains · -544 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW4,179 curated domains not answering+1,350 vs yesterdayERRORS27,157 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED80,563 throttled or blocked our scanner429 rate-limit / 403 bot-block

coinbase.com

Observed Jul 18, 2026, 12:01 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall
Runs onCloudflare
Email byGoogle Workspace
Secured byGoogle Trust Services
Registered withMarkMonitor Inc.
Also uses1PasswordAtlassianDocuSignFacebook/MetaGoogle Search ConsoleMiroSlackStripe
IPv6 · crypto
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat coinbase.com actually stands on - every host below is a signed observation
coinbase.com
A / AAAA
104.18.35.15172.64.152.2412a06:98c1:3105::6812:230f2606:4700:440a::ac40:98f1
Cloudflareserves the site
NS
sam.ns.cloudflare.comsue.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
coinbase.com
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 104.18.35.15
  • 172.64.152.241

AAAA 2

  • 2a06:98c1:3105::6812:230f
  • 2606:4700:440a::ac40:98f1

MX 5

  • 1aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 45

  • 1password-site-verification=2JYSQ7TWXVDP7DWPHTZRLBRESI
  • DirectFedAuthUrl=https://coinbase.okta.com/app/coinbase_pwc_1/exk1ke47d0l3gh5gp0x8/sso/saml
  • MS=ms23710130
  • TSW_ODg1dGVyYXN3aXRjaA==
  • ahrefs-site-verification_cc6fbe8f6b26b9b07f97892536cda45b7ce7917b040baacf81facc14e820e887
  • amp-by-sourcegraph-domain-verification-h888ba=g5N2hQggP0wSY4x7gSMgfvyyg
  • applause-verification:4e8f0335-526a-4a52-8da4-f4ecedc931ef
  • apple-domain-verification=7XHeC6zhfdUOulBSjnUyABNhGLx2RMnjebZj2HMPH4w
  • apple-domain-verification=8HpWlON81jar5xva
  • atlassian-domain-verification=hDuZ4Ho1Rts/J4kaoxR9K2Qnywy2Uo+GV8bDIwXEsE4uovTo0vcL+8AVpI4+3j2V

NS 2

  • sam.ns.cloudflare.com
  • sue.ns.cloudflare.com

SOA 1

  • sam.ns.cloudflare.com dns.cloudflare.com

CAA 5

  • iodef "mailto:security@coinbase.com"
  • issue "amazonaws.com"
  • issue "digicert.com"
  • issue "letsencrypt.org"
  • issue "pki.goog; cansignhttpexchanges=yes"

TLS Certificates (3)

Common NameIssuerExpires
coinbase.com C=US, O=Google Trust Services, CN=WE1 Tue, 13 Oct 2026 05:30:25 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for coinbase.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for coinbase.com <a href="https://domaindrift.io/t/coinbase.com"> <img src="https://domaindrift.io/badge/coinbase.com.svg" width="300" height="64" alt="DomainDrift signed observations for coinbase.com"> </a>

Ed25519 Receipt

Receipt ID
1c10aea0-4239-4b57-ab7e-16bab2a15e69
Output Hash
9ca202c84af27b9dca0fc4d75e58b4d1a283dc8998a93f58b9362bdd311fb799
Signature
ed25519:c4bb59b620fd6994463a4b28c86916e0a9d0ee62b8bc525a1fba8f55e2517ab6cc9bbb347f80216a6d096e009590b0dd5d496da2d8b8550e8c8a2c6ccb282e07
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser