CONTINUOUS INTERNET TELEMETRY24H DRIFT10,884 material changesacross 10,486 domains · +255 vs yesterdayDNS DRIFT769 domains changed DNS providertop destination parity.domains · -11 vs yesterdayEMAIL DRIFT183 domains switched email providertop destination outlook.com · +13 vs yesterdayCERT DRIFT229 domains switched issuing CA24h · -1 vs yesterdayNOW1,093 curated domains not reachable-256 vs yesterdaySITE ERRORS18,969 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED95,218 throttled or blocked our scanner429 rate-limit / 403 bot-block

greenpeace.org

Observed Jul 21, 2026, 19:15 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Secured byLet's Encrypt
Registered withGandi SAS
Also usesMiroFacebook/MetaGoogle Search ConsoleNotionHubSpotStripeAtlassian
non_profit
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat greenpeace.org actually stands on - every host below is a signed observation
greenpeace.org
A / AAAA
35.184.130.59
Cloudflareserves the site
NS
ns-cloud-c1.googledomains.comns-cloud-c2.googledomains.comns-cloud-c3.googledomains.comns-cloud-c4.googledomains.com
googledomains.comanswers its DNS
MX
aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.com+1 more
Google Workspacereceives its email
TLS
greenpeace.org
Let's Encryptissued its certificate

DNS Records

A 1

  • 35.184.130.59

MX 5

  • 1aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com
  • 10aspmx2.googlemail.com
  • 10aspmx3.googlemail.com

TXT 36

  • PmaAd0AmTQMFlViys9viAYZxiGM78xmD
  • mandrill_verify.Q_JDciKl5J4JwQeZS3j7PA
  • airtable-verification=34e90fadc29b4a7f0ccd0e958b4aedc6
  • amazonses:U0TjwasGtQ7BX+vOwNfZMqOvXCTkrDvAMeoQ2vAkDsE=
  • knowbe4-site-verification=8cedc19bee11f0e3a78d3f443ac75403
  • miro-verification=f5e0a1ede1b81a1bdaf82a665d100b264f21952d
  • facebook-domain-verification=fyzkaeeg86r47y3e56u80g7rucyz4y
  • mixpanel-domain-verify=2e95c43d-2182-4022-842b-483081b3d9f9
  • a1379742935a9b4fe5220281db19c39a111b927ac4e7b6dd9772463d7f2ad5a1
  • google-site-verification=cabk3280FRUiQMgdVbPPPTdbytCnXe1LFEpYWIW5TMY

NS 4

  • ns-cloud-c1.googledomains.com
  • ns-cloud-c2.googledomains.com
  • ns-cloud-c3.googledomains.com
  • ns-cloud-c4.googledomains.com

SOA 1

  • ns-cloud-c1.googledomains.com cloud-dns-hostmaster.google.com

TLS Certificates (3)

Common NameIssuerExpires
greenpeace.org C=US, O=Let's Encrypt, CN=YR2 Sun, 04 Oct 2026 03:41:22 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for greenpeace.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for greenpeace.org <a href="https://domaindrift.io/t/greenpeace.org"> <img src="https://domaindrift.io/badge/greenpeace.org.svg" width="300" height="64" alt="DomainDrift signed observations for greenpeace.org"> </a>

Ed25519 Receipt

Receipt ID
rcpt_963a00d29e85d5de
Output Hash
90cf4e2b7d7d0240aaf56f8c1926fd04a3d64cc21b2259f31f1e6418e756e0e1
Signature
ed25519:94ad88b4b7f620e8eb1a4f765119a4ac38cb1efeee3970b592cb30c944014bbf40f89d2f94bd6204a3b99a26efdcb36411b1de9579e14d3176aec3146fcc2505
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser