gitlab.com

Observed 2026-07-13T00:02:11.648565852+00:00 (5h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle Workspace

Secured bySectigo

Registered withGandi SAS

Also usesDocuSignGoogle Search ConsoleStripe

IPv6 · 5 subdomains · dev_tools

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat gitlab.com actually stands on - every host below is a signed observation

gitlab.com

A / AAAA

172.65.251.782606:4700:90:0:f22e:fbec:5bed:a9b9

Cloudflareserves the site

diva.ns.cloudflare.comjermaine.ns.cloudflare.com

cloudflare.comanswers its DNS

aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

gitlab.com

Sectigo Limitedissued its certificate

DNS Records

A 1

172.65.251.78

AAAA 1

2606:4700:90:0:f22e:fbec:5bed:a9b9

MX 5

1aspmx.l.google.com
10alt3.aspmx.l.google.com
10alt4.aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com

TXT 31

MS=ms60523131
MS=ms83893381
_globalsign-domain-verification=4azHJ7gL04Dr8r2VR0txu7OrWg7uZpU6v7LOHVP1b3
adobe-idp-site-verification=5a5e001556a2c0595ed571d2a1f7b5f8a749a00742853e035eb909bdd31622b8
apple-domain-verification=UNUD9vY0Jp9z5TjO
asv=3f763643512ad5bdcc0d42caea1b3951
decagon-domain-verification-zt3jq7=VuFhaVDQNBAnCgE6ne38ul9JA
docusign=1a7d6818-2cf5-4956-a9fb-c3d2e9a578dd
drift-domain-verification=fa583cfff88c496bcc62651057550656a98ab3e689c314255a1a6ae848e3e56d
gitlab-pages-verification-code=5228e61c992af7e65f5f5160f0587fb4

NS 2

diva.ns.cloudflare.com
jermaine.ns.cloudflare.com

SOA 1

diva.ns.cloudflare.com dns.cloudflare.com

CAA 17

iodef "mailto:security@gitlab.com"
issue "amazon.com"
issue "amazonaws.com"
issue "amazontrust.com"
issue "awstrust.com"
issue "comodoca.com"
issue "digicert.com; cansignhttpexchanges=yes"
issue "globalsign.com"
issue "letsencrypt.org"
issue "pki.goog; cansignhttpexchanges=yes"

TLS Certificates (4)

Common Name	Issuer	Expires
`gitlab.com`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36	Tue, 10 Nov 2026 23:59:59 +0000
`Sectigo Public Server Authentication CA DV R36`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46	Fri, 21 Mar 2036 23:59:59 +0000
`Sectigo Public Server Authentication Root R46`	C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority	Mon, 18 Jan 2038 23:59:59 +0000
`USERTrust RSA Certification Authority`	C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services	Sun, 31 Dec 2028 23:59:59 +0000

Subdomains (5)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for gitlab.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/gitlab.com">
  <img src="https://domaindrift.io/badge/gitlab.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for gitlab.com">
</a>

Ed25519 Receipt

Receipt ID: 088c7875-ebf3-44a2-b152-e162adba8fa4
Output Hash: e99e905a9faf3b8d149701c5ddde96b937120fef9f5bd19b8979e8e558ede4a8
Signature: ed25519:8c832b087e2a6cb82f8ae8bb6fae94cfc902162d1540aed91aadce7436b7f8b21e18f42a4d74554573a243217b8ec8b4dd2d5641489a7556adfa1239d1cc4207
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/gitlab.com