CONTINUOUS INTERNET TELEMETRY24H DRIFT3,246 material changesacross 2,824 domains · -152 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -5 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,962 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,246 material changesacross 2,824 domains · -152 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -5 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,962 responded with an errorlast probe · 5xx / 404 / 429 / 403

gettyimages.com

Observed 2026-07-12T18:02:47.230Z (13h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMimecast
Registered withCSC Corporate Domains, Inc.
Also usesDocuSignFacebook/MetaMiroAtlassianStripeGoogle Search Console
media_entertainment
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat gettyimages.com actually stands on - every host below is a signed observation
gettyimages.com
A / AAAA
18.173.121.5818.173.121.3918.173.121.8318.173.121.52
Cloudflareserves the site
NS
ns-692.awsdns-22.netns-194.awsdns-24.comns-1600.awsdns-08.co.ukns-1269.awsdns-30.org
awsdns-22.net + awsdns-24.com + moreanswers its DNS
MX
us-smtp-inbound-1.mimecast.comus-smtp-inbound-2.mimecast.com
Mimecastreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.gettyimages.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time65 ms
DNS resolutionNOERROR
Redirect chain
https://www.gettyimages.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 4

  • 18.173.121.58
  • 18.173.121.39
  • 18.173.121.83
  • 18.173.121.52

MX 2

  • 10us-smtp-inbound-1.mimecast.com
  • 10us-smtp-inbound-2.mimecast.com

TXT 41

  • ac72d06b2f4c4355b3d37e54bf64a730
  • r5hj6j3hjtp5hpc9ssgdkrl13g
  • adobe-idp-site-verification=2c5ba67472b1d70c2213a2bb7c6e769ee75a0dd94238c39bb832abd80462d13c
  • docusign=b7173412-6f1b-4f3d-aac1-4d062672625c
  • MpOIMwJwEbodE0zWUvZQAlnakeYnwRlz/uWFufvIB2wZsuBWGwaQaF1uJTzyEvVrFWBSGNhWoEkOrZ1IZhAmqg==
  • 6pd78leht1929rrjphicfrb1h
  • aj3h9pvurs81ivgqse4n887oc2
  • ozECEJCtCPL1buHkf0i1XhVu9bUhJxFEZX3QRAZp41iUI+YlumJIhPc9Uhxj/m7yJspJ0sy3Is3V1stL5vDijw==
  • _globalsign-domain-verification=yW6SbkTqnuFXZBySBRWg96tGoQMb9oUK1QdltZ6gZ1
  • v=msv1 t=56E21521-0012-4C74-BAF5-371A005951A8

NS 4

  • ns-692.awsdns-22.net
  • ns-194.awsdns-24.com
  • ns-1600.awsdns-08.co.uk
  • ns-1269.awsdns-30.org

SOA 1

  • ns-1600.awsdns-08.co.uk dnsadmin.gettyimages.com

CAA 12

  • iodef mailto:dnsadmins@gettyimages.com
  • issue digicert.com
  • issue sectigo.com
  • issuewild amazon.com
  • issuewild godaddy.com
  • issue globalsign.com
  • issue amazon.com
  • issuewild digicert.com
  • issue godaddy.com
  • issue letsencrypt.org

TLS Certificates (0)

None.

Subdomains (20)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for gettyimages.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for gettyimages.com <a href="https://domaindrift.io/t/gettyimages.com"> <img src="https://domaindrift.io/badge/gettyimages.com.svg" width="300" height="64" alt="DomainDrift signed observations for gettyimages.com"> </a>

Ed25519 Receipt

Receipt ID
d738a9eb-8274-4275-8e55-66eb218ea8e8
Output Hash
559ab79e6f1753939efb10f45db05825b62ba9c8a33733f8b6f8e6276418fc69
Signature
ed25519:e958ec2a2eefd153f66ccbc0863db911199ab9465a4295155888002a0fd204c45c56b74edb56ebe5479ef7f161f217def523ef6fc1edac292cdea0785a8a1909
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser