CONTINUOUS INTERNET TELEMETRY24H DRIFT2,835 material changesacross 2,520 domains · -563 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,330 curated domains not answering-6,388 vs yesterdayERRORS10,947 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,835 material changesacross 2,520 domains · -563 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,330 curated domains not answering-6,388 vs yesterdayERRORS10,947 responded with an errorlast probe · 5xx / 404 / 429 / 403

gmail.com

Observed 2026-07-12T20:04:45.667Z (20h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
IPv6 · 5 subdomains · tranco_1k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat gmail.com actually stands on - every host below is a signed observation
gmail.com
A / AAAA
142.251.218.2292607:f8b0:4005:815::2005
Cloudflareserves the site
NS
ns4.google.comns2.google.comns3.google.comns1.google.com
google.comanswers its DNS
MX
alt3.gmail-smtp-in.l.google.comalt2.gmail-smtp-in.l.google.comalt4.gmail-smtp-in.l.google.comalt1.gmail-smtp-in.l.google.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://mail.google.com/mail/u/0/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time71 ms
DNS resolutionNOERROR
Redirect chain
https://mail.google.com/mail/u/0/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 142.251.218.229

AAAA 1

  • 2607:f8b0:4005:815::2005

MX 5

  • 30alt3.gmail-smtp-in.l.google.com
  • 20alt2.gmail-smtp-in.l.google.com
  • 40alt4.gmail-smtp-in.l.google.com
  • 10alt1.gmail-smtp-in.l.google.com
  • 5gmail-smtp-in.l.google.com

TXT 6

  • yahoo-verification-key=dKYwfVbaxatmcXiXy6LDAxMRirqpOq5tj98iJv9qWVk=
  • yahoo-verification-key=+eZwIPSgRxkAUzDtqT8Qhk+j4A1JF6V/wtGoyGTkELY=
  • globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=
  • v=spf1 redirect=_spf.google.com
  • v=DMARC1; p=none; sp=quarantine; rua=mailto:mailauth-reports@google.com
  • v=STSv1; id=20190429T010101;

NS 4

  • ns4.google.com
  • ns2.google.com
  • ns3.google.com
  • ns1.google.com

SOA 1

  • ns1.google.com dns-admin.google.com

CAA 1

  • issue pki.goog

TLS Certificates (0)

None.

Subdomains (5)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for gmail.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for gmail.com <a href="https://domaindrift.io/t/gmail.com"> <img src="https://domaindrift.io/badge/gmail.com.svg" width="300" height="64" alt="DomainDrift signed observations for gmail.com"> </a>

Ed25519 Receipt

Receipt ID
18a3dc79-929c-4111-b646-0035262e7453
Output Hash
a7c3c56844fa43a5b2ec3f62e85c231e00ce0cde613744281fba096cfb1d6a84
Signature
ed25519:4caa630f653620beaa7225a35a87a2be5846cfd04e657e1be5ae9cfb9c9a89d3ec45eb768f8a834749dd72ec830a650d6c78d7d8d074eda5e90dfa3475de0108
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser