CONTINUOUS INTERNET TELEMETRY24H DRIFT3,042 material changesacross 2,731 domains · -356 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination cloudflare.com · -3 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,953 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,042 material changesacross 2,731 domains · -356 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination cloudflare.com · -3 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,953 responded with an errorlast probe · 5xx / 404 / 429 / 403

forwardemail.net

Observed 2026-07-13T00:04:05.557519159+00:00 (13h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onDatacamp Limited
Secured bySectigo
Registered withNameCheap, Inc.
Also usesGoogle Search ConsoleStripe
DNSSEC on · IPv6 · email_comms
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat forwardemail.net actually stands on - every host below is a signed observation
forwardemail.net
A / AAAA
121.127.44.692a02:6ea0:d71e::5
Datacamp Limitedserves the site
NS
uma.ns.cloudflare.comgreg.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
mx1.forwardemail.netmx2.forwardemail.net
forwardemail.netreceives its email
TLS
*.forwardemail.net
Sectigo Limitedissued its certificate

DNS Records

A 1

  • 121.127.44.69

AAAA 1

  • 2a02:6ea0:d71e::5

MX 2

  • 0mx1.forwardemail.net
  • 0mx2.forwardemail.net

TXT 10

  • forward-email-site-verification=OgBtCf0Xkq
  • yahoo-verification-key=si8Sk2QcPzmIrW2pUw29zPNEzRKzHr0ISgJTWimoxpM=
  • google-site-verification=DBUsD3_MzaXh2N1onlaZdCELRyT3dHKxkx9d8TpNZVQ
  • google-site-verification=OjDxZN2DU7XqtvyPpDrvMcYjef2msFDLga3NuIXHJiE
  • google-site-verification=TDhFtE5nIp6D7zTPt3CdsWbOoG87xWt_7um_P5iYwx8
  • google-site-verification=fMQEHvvEIPRSxyjBBTu_R43f7l25UgcE3wxzwAYUoh4
  • stripe-verification=3cf1eee253ef0954773402850376d9b3d97bfe3f2dee06bcbd76839c768a56c3
  • v=spf1 a include:mx1.forwardemail.net include:mx2.forwardemail.net include:smtp.forwardemail.net -all
  • v=DMARC1; p=reject; pct=100; rua=mailto:dmarc-646d8d480dd3cc2c671633e2@forwardemail.net;
  • v=STSv1; id=20231103T000000;

NS 2

  • uma.ns.cloudflare.com
  • greg.ns.cloudflare.com

SOA 1

  • greg.ns.cloudflare.com dns.cloudflare.com

SRV 2

  • imap.forwardemail.net:993 p0
  • smtp.forwardemail.net:465 p0

TLS Certificates (3)

Common NameIssuerExpires
*.forwardemail.net C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 Wed, 20 Jan 2027 23:59:59 +0000
Sectigo Public Server Authentication CA DV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for forwardemail.net. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for forwardemail.net <a href="https://domaindrift.io/t/forwardemail.net"> <img src="https://domaindrift.io/badge/forwardemail.net.svg" width="300" height="64" alt="DomainDrift signed observations for forwardemail.net"> </a>

Ed25519 Receipt

Receipt ID
8f3ab828-e101-4161-833f-fc99750ab0eb
Output Hash
2505b7d90700b2c311464a0429e3f88ab2bae84177eaf3514e1488c03aa937ad
Signature
ed25519:7540c313c229072d97b521fa63c3b6abbeac89714c137184fa099986fda7f7bd8e4fab45f2319eda9a022dc8d83c14e5f75cd159beacb57a2ea97aef26baf006
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser