CONTINUOUS INTERNET TELEMETRY24H DRIFT1,031 material changesacross 922 domains · +577 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination parity.domains · +20 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW2,419 curated domains not answering+204 vs yesterdayERRORS10,047 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED3,442 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,031 material changesacross 922 domains · +577 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination parity.domains · +20 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW2,419 curated domains not answering+204 vs yesterdayERRORS10,047 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED3,442 throttled or blocked our scanner429 rate-limit / 403 bot-block

ghe.com

Observed 2026-07-15T18:51:58.832Z (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Registered withMarkMonitor Inc.
Also usesGoogle Search Console
8 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ghe.com actually stands on - every host below is a signed observation
ghe.com
A / AAAA
140.82.112.3140.82.114.4140.82.113.4140.82.114.3+2 more
Cloudflareserves the site
NS
ns-1029.awsdns-00.orgns-288.awsdns-36.comns-1706.awsdns-21.co.ukns-944.awsdns-54.net
awsdns-00.org + awsdns-36.com + moreanswers its DNS
MX
in-ghae-a.smtp.github.comin-ghae-b.smtp.github.com
github.comreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://github.com
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time213 ms
DNS resolutionNOERROR
Redirect chain
https://github.com

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 6

  • 140.82.112.3
  • 140.82.114.4
  • 140.82.113.4
  • 140.82.114.3
  • 140.82.113.3
  • 140.82.112.4

MX 2

  • 10in-ghae-a.smtp.github.com
  • 10in-ghae-b.smtp.github.com

TXT 4

  • google-site-verification=zMzpFN2bPY0ehdr0n9QOaQbnpwzjrvhGtMVE6NGlS5A
  • google-site-verification=BQlUgDWwny__7NUXknBaYNU3PDGdlmjmxVBl1nUukYs
  • v=spf1 include:_spf-a.microsoft.com include:_spf-b.microsoft.com include:_spf1-meo.microsoft.com include:_spf-meo.microsoft.com -all
  • v=DMARC1; p=reject; pct=100; rua=mailto:d@rua.agari.com; ruf=mailto:d@ruf.agari.com; fo=1

NS 4

  • ns-1029.awsdns-00.org
  • ns-288.awsdns-36.com
  • ns-1706.awsdns-21.co.uk
  • ns-944.awsdns-54.net

SOA 1

  • ns-944.awsdns-54.net awsdns-hostmaster.amazon.com

CAA 6

  • issuewild sectigo.com
  • issuewild digicert.com
  • issue sectigo.com
  • issue letsencrypt.org
  • issuewild letsencrypt.org
  • issue digicert.com

TLS Certificates (0)

None.

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ghe.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ghe.com <a href="https://domaindrift.io/t/ghe.com"> <img src="https://domaindrift.io/badge/ghe.com.svg" width="300" height="64" alt="DomainDrift signed observations for ghe.com"> </a>

Ed25519 Receipt

Receipt ID
579b4487-6a11-4a1d-99b8-da7685137709
Output Hash
7617ffc679851407d1163aca0c6ae83f2fd3880b20e22db332a499f6f32f0879
Signature
ed25519:d9184af3dd43bdb318481aa8c484f8438c396ab13b76b4852c683293c336b861a6aba2782db5f2246e40b23d0dbcd9426371c4cb3b80ac77f570636fb118620d
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser