download.com

Observed Jul 18, 2026, 13:06 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onGoogle

Email byProofpoint

Secured byLet's Encrypt

Also usesGoogle Search Console

4 subdomains · tranco_20k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat download.com actually stands on - every host below is a signed observation

download.com

A / AAAA

35.187.33.31

Googleserves the site

ns-cloud-d4.googledomains.comns-cloud-d3.googledomains.comns-cloud-d1.googledomains.comns-cloud-d2.googledomains.com

googledomains.comanswers its DNS

mxa-00262c01.gslb.pphosted.commxb-00262c01.gslb.pphosted.com

Proofpointreceives its email

TLS

softonic.es

Let's Encryptissued its certificate

DNS Records

A 1

35.187.33.31

MX 2

0mxa-00262c01.gslb.pphosted.com
0mxb-00262c01.gslb.pphosted.com

TXT 25

ip4:62.108.138.0/28 ip4:216.239.114.214/23 ip4:216.239.114.222/23
google-site-verification:ZgT2oOTb8bnurVcKr3D6b3mjvXuvobb20MAs7ZUp9Zk
v=spf1 mx ip4:64.30.227.218 ip4:64.30.226.54/31 ip4:74.125.148.0/22
include:_spf.google.com include:spf-00262c01.pphosted.com -all
MS=ms67064858
ip4:216.239.125.28/23 ip4:202.73.54.176/28 ip4:58.65.7.128/28
v=DMARC1; p=none; rua=mailto:c86cd61ccfab937@rep.dmarcanalyzer.com; ruf=mailto:c86cd61ccfab937@for.dmarcanalyzer.com; fo=1;
MS=ms67064858
include:_spf.google.com include:spf-00262c01.pphosted.com -all
ip4:62.108.138.0/28 ip4:216.239.114.214/23 ip4:216.239.114.222/23

NS 4

ns-cloud-d4.googledomains.com
ns-cloud-d3.googledomains.com
ns-cloud-d1.googledomains.com
ns-cloud-d2.googledomains.com

SOA 1

ns-cloud-d1.googledomains.com cloud-dns-hostmaster.google.com

TLS Certificates (3)

Common Name	Issuer	Expires
`softonic.es`	C=US, O=Let's Encrypt, CN=YR2	Wed, 07 Oct 2026 06:33:06 +0000
`YR2`	C=US, O=ISRG, CN=Root YR	Sat, 02 Sep 2028 23:59:59 +0000
`Root YR`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for download.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/download.com">
  <img src="https://domaindrift.io/badge/download.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for download.com">
</a>

Ed25519 Receipt

Receipt ID: 887f7bea-3e9f-4db4-8ed3-3343bd41fed5
Output Hash: a84437789e69139086f40c35c0a8270bf6886947b61340f2a727fa07e83cb79d
Signature: ed25519:956aa93a63cf702e825c41fb0a193cc1a261dff37485243ffd19618372fadf74b6941049568e6b6c96d37be0745321af3cdd41c840cf06e58d5921dfc1d6270c
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/download.com