CONTINUOUS INTERNET TELEMETRY24H DRIFT1,900 material changesacross 1,714 domains · -651 vs yesterdayDNS DRIFT13 domains changed DNS providertop destination afternic.com · -3 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,405 curated domains not answeringlast probe, steadyERRORS10,892 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT1,900 material changesacross 1,714 domains · -651 vs yesterdayDNS DRIFT13 domains changed DNS providertop destination afternic.com · -3 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,405 curated domains not answeringlast probe, steadyERRORS10,892 responded with an errorlast probe · 5xx / 404 / 429 / 403

ip2location.com

Observed 2026-07-13T09:41:59.633Z (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byAmazon SES
Registered withNameCheap, Inc.
Also usesGoogle Search Console
IPv6 · 10 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ip2location.com actually stands on - every host below is a signed observation
ip2location.com
A / AAAA
172.67.71.137104.26.3.214104.26.2.2142606:4700:20::681a:3d6+2 more
Cloudflareserves the site
NS
walt.ns.cloudflare.comvera.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
mx.hexasoft.my
Amazon SESreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.ip2location.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time80 ms
DNS resolutionNOERROR
Redirect chain
https://www.ip2location.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 3

  • 172.67.71.137
  • 104.26.3.214
  • 104.26.2.214

AAAA 3

  • 2606:4700:20::681a:3d6
  • 2606:4700:20::681a:2d6
  • 2606:4700:20::ac43:4789

MX 1

  • 10mx.hexasoft.my

TXT 7

  • v=spf1 +mx include:sparkpostmail.com include:sendgrid.net include:spf.hexasoft.my include:amazonses.com -all
  • google-site-verification=y8RleI7CMLHnrv88dzZcDNjCKA_jf-fg4kRp_nk6wY8
  • google-site-verification=RwrVwf76WbCmaDj9ltfGzmDeOI32BYoSAUtXtQhn8eM
  • v=OSSRH-58856
  • google-site-verification=LlhcQnePfp16diTkGQYelE2GPxjr6FlpNthTqRT1dU4
  • v=DMARC1; p=reject; sp=reject; rua=mailto:09dc2cca599b.a@dmarcinput.com; ruf=mailto:09dc2cca599b.f@dmarcinput.com; adkim=s; aspf=s; ri=86400; fo=1; pct=100
  • v=DKIM1; (detected)

NS 2

  • walt.ns.cloudflare.com
  • vera.ns.cloudflare.com

SOA 1

  • vera.ns.cloudflare.com dns.cloudflare.com

CAA 12

  • issue ssl.com
  • issuewild ssl.com
  • issue amazon.com
  • issue letsencrypt.org
  • issue digicert.com; cansignhttpexchanges=yes
  • issuewild pki.goog; cansignhttpexchanges=yes
  • issue pki.goog; cansignhttpexchanges=yes
  • issuewild digicert.com; cansignhttpexchanges=yes
  • issuewild comodoca.com
  • issuewild amazon.com

TLS Certificates (0)

None.

Subdomains (10)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ip2location.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ip2location.com <a href="https://domaindrift.io/t/ip2location.com"> <img src="https://domaindrift.io/badge/ip2location.com.svg" width="300" height="64" alt="DomainDrift signed observations for ip2location.com"> </a>

Ed25519 Receipt

Receipt ID
d8555868-a815-42b6-a4d5-e47e484c79e0
Output Hash
658f77a66c0035c0911e14293eea72a233b4e4eb56267576473036363a794a10
Signature
ed25519:a498b3691cf8f89f3c940c62b5cff90e3af19e9eae579ebd0366aca13b6fbf2a43f6fcf140b9a0dcd863d82ac12691055069daa71fb3bbe1719bd9cc0d1a460d
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser