CONTINUOUS INTERNET TELEMETRY24H DRIFT2,889 material changesacross 2,543 domains · -509 vs yesterdayDNS DRIFT20 domains changed DNS providertop destination cloudflare.com · -7 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination reyrey.com · -2 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,962 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,889 material changesacross 2,543 domains · -509 vs yesterdayDNS DRIFT20 domains changed DNS providertop destination cloudflare.com · -7 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination reyrey.com · -2 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,962 responded with an errorlast probe · 5xx / 404 / 429 / 403

doma.com

Observed 2026-07-13T00:41:57.127274672+00:00 (9h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onAutomattic
Email byProofpoint
Secured byGoogle Trust Services
Also uses1PasswordAtlassianDocuSignGoogle Search Console
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat doma.com actually stands on - every host below is a signed observation
doma.com
A / AAAA
192.0.79.151192.0.79.185
Automatticserves the site
NS
ns1-09.azure-dns.comns2-09.azure-dns.netns3-09.azure-dns.orgns4-09.azure-dns.info
azure-dns.com + azure-dns.net + moreanswers its DNS
MX
mx0a-001c9101.pphosted.commx0b-001c9101.pphosted.com
Proofpointreceives its email
TLS
tls.automattic.com
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 192.0.79.151
  • 192.0.79.185

MX 2

  • 10mx0a-001c9101.pphosted.com
  • 10mx0b-001c9101.pphosted.com

TXT 14

  • v=spf1 mx ip4:52.240.141.127 ip4:20.242.178.160/28 ip4:54.205.74.210 ip4:52.73.240.25 ip4:52.207.46.48 include:spf-001c9101.pphosted.com include:auth.msgapp.com include:spf.protection.outlook.com include:mg-spf.greenhouse.io ~all
  • 1password-site-verification=IU6QTRUDTBEC3ODRWDAZAVENGY
  • 2444094
  • 3184309
  • apple-domain-verification=xNyFrQkHDR7UbpqZ
  • atlassian-domain-verification=iViBOhKIFM6p5Ov/RcL9D6b0q1WT0Mfupg6yQlxZ3JbZj6QoXcuUrNV8hH31hGKL
  • atlassian-sending-domain-verification=2bf21a8d-a387-4386-a0dc-74b87a23028c
  • docusign=33ca3323-8001-4e1d-a842-d6f52d3c87a0
  • google-site-verification=fSYmZBocR_Czu-ZKjPisoRsTAHQlDBn11DaZQXczkls
  • google-site-verification=M_FeO86mYRotnGQwxjPnIrxH9u7itBvhAXev8pH7v5Q

NS 4

  • ns1-09.azure-dns.com
  • ns2-09.azure-dns.net
  • ns3-09.azure-dns.org
  • ns4-09.azure-dns.info

SOA 1

  • ns1-09.azure-dns.com azuredns-hostmaster.microsoft.com

TLS Certificates (3)

Common NameIssuerExpires
tls.automattic.com C=US, O=Google Trust Services, CN=WR1 Thu, 17 Sep 2026 17:42:08 +0000
WR1 C=US, O=Google Trust Services LLC, CN=GTS Root R1 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R1 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for doma.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for doma.com <a href="https://domaindrift.io/t/doma.com"> <img src="https://domaindrift.io/badge/doma.com.svg" width="300" height="64" alt="DomainDrift signed observations for doma.com"> </a>

Ed25519 Receipt

Receipt ID
e38d42d5-0e5f-455a-856d-b77530ff39d9
Output Hash
ed168ac64d66237d5a65818607ff74fd736caf5af68ca95d1e72e5b9238f943b
Signature
ed25519:9fd2aa66b0a6149e3616a568c090313a209c02496a0262b11555b01cc965dca7e53d673b79daf71ca81539c5a5ec33e43bb3353b419cba02a305de4e5628da03
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser