CONTINUOUS INTERNET TELEMETRY24H3,360 material changesacross 2,895 domains · -487 vs yesterdayMOVES27 domains changed DNS providertop destination brainydns.com · -11 vs yesterdayMOVES6 domains switched email providertop destination 365cool.com · -3 vs yesterdayTLS7 domains switched issuing CA24h · -3 vs yesterdayNOW9,720 curated domains not answeringlast probe, steady24H3,360 material changesacross 2,895 domains · -487 vs yesterdayMOVES27 domains changed DNS providertop destination brainydns.com · -11 vs yesterdayMOVES6 domains switched email providertop destination 365cool.com · -3 vs yesterdayTLS7 domains switched issuing CA24h · -3 vs yesterdayNOW9,720 curated domains not answeringlast probe, steady

leadforensics.com

Observed 2026-07-12T14:45:42.599Z (9h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMimecast
Also usesGoogle Search ConsoleHubSpot
11 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat leadforensics.com actually stands on - every host below is a signed observation
leadforensics.com
A / AAAA
104.18.30.60104.18.31.60
Cloudflareserves the site
NS
maeve.ns.cloudflare.commajor.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
eu-smtp-inbound-1.mimecast.comeu-smtp-inbound-2.mimecast.com
Mimecastreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.leadforensics.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time584 ms
DNS resolutionNOERROR
Redirect chain
https://www.leadforensics.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 104.18.30.60
  • 104.18.31.60

MX 2

  • 10eu-smtp-inbound-1.mimecast.com
  • 10eu-smtp-inbound-2.mimecast.com

TXT 19

  • PhAX+PgqvVs0DWEt5DeGa7P5SMsQdEHWO1dk0iLtU1lSgounxTAKAy0u5YXzkLmlZlR07UUXhmFtYGWrPe0UkA==
  • taegis-domain-verification=13a7070b5c3d6ffd5decdfd99304a20445b6ffd631875314d33e87018888f86d
  • globalsign-domain-verification=dYEpHGVHZhPedHWYoViRViNyC-yc92tCHuiYT1h6Yf
  • google-site-verification=jj8pQUqeZ90uoQkyAjt6KCSxL6US6RGp6HAE6RD3TnI
  • globalsign-domain-verification=1tDQCkrFpNTJ5iTKrf4ODYqWpFQEJKgUP7TI8QTsg4
  • google-site-verification=JUeBx2P9lQXdVW1cS9GjzUO3zRYmJAuYolkbExBuNFo
  • google-site-verification=gBl2JW3FMfX9hI1EJPb8AabsmE_hV5GPAA88gvBLF_A
  • google-site-verification=OwBIVxzlcrlp0PMpoPRJXlDGIAeBsa1CLAQN4jC6V68
  • MS=ms54788049
  • loaderio=774c934efb0fba7a60136d5fe4ad5505

NS 2

  • maeve.ns.cloudflare.com
  • major.ns.cloudflare.com

SOA 1

  • maeve.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (11)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what Connor observes and signs for leadforensics.com. It updates itself. It attests a signed observation - not that the site is safe.

Connor signed-observation badge for leadforensics.com <a href="https://domaindrift.io/t/leadforensics.com"> <img src="https://domaindrift.io/badge/leadforensics.com.svg" width="300" height="64" alt="Connor signed observations for leadforensics.com"> </a>

Ed25519 Receipt

Receipt ID
ea493478-9128-4eec-a4f0-3dbc529f0802
Output Hash
38af9c18dfbe27c48c89b74620d54775e542a03247720eede8dc7b89d16dd0c1
Signature
ed25519:9e794f397587c1c434b16bd5e213dd91b7e27e203ff3ec537191b79015680b474bb52102f0fc0e5d678ed841b062b48bc00ee18f5be315f1996c87b67c318707
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser