CONTINUOUS INTERNET TELEMETRY24H DRIFT25,547 material changesacross 22,819 domains · last 24hROTATION56 domains moved DNS from koaladns.com to kirklanddc.com, 54 moved backa rotation loop, not a migration · 24hEMAIL DRIFT1 domain switched email providertop destination ~NOW603 curated domains not reachablelast probe, steadySITE ERRORS33,533 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 118,101 sites429 rate-limit / 403 bot-block, a posture signal

legally-ok.com

Observed Jul 26, 2026, 03:41 UTC (13d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of legally-ok.com was taken 13d ago

legally-ok.com is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting legally-ok.com under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch legally-ok.com Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Up right now
Email byMicrosoft 365
Secured byLet's Encrypt
Also usesGoogle Search Console
IPv6 · 1 subdomain · majestic
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat legally-ok.com actually stands on - every host below is a signed observation
legally-ok.com
A / AAAA
188.40.30.1202a01:4f8:d0a:134e::2
2a01serves the site
NS
ns-cloud-a2.googledomains.comns-cloud-a3.googledomains.comns-cloud-a1.googledomains.comns-cloud-a4.googledomains.com
googledomains.comanswers its DNS
MX
legallyok-com01i.mail.protection.outlook.com
Microsoft 365receives its email
TLS
legally-ok.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 188.40.30.120

AAAA 1

  • 2a01:4f8:d0a:134e::2

MX 1

  • 0legallyok-com01i.mail.protection.outlook.com

TXT 3

  • google-site-verification=-KGslE26OHkgncihXyh-emORg0njiesvaa75j22A_k8
  • MS=ms93955112
  • v=spf1 include:spf.mailjet.com include:spf.protection.outlook.com ~all

NS 4

  • ns-cloud-a2.googledomains.com
  • ns-cloud-a3.googledomains.com
  • ns-cloud-a1.googledomains.com
  • ns-cloud-a4.googledomains.com

SOA 1

  • ns-cloud-a1.googledomains.com cloud-dns-hostmaster.google.com

TLS Certificates (3)

Common NameIssuerExpires
legally-ok.com C=US, O=Let's Encrypt, CN=YR2 Thu, 10 Sep 2026 20:51:53 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_ab62c64547c9ada2
Output Hash
50d27f320d0c1e58d4d2235832e8c567019c67538171efb7b63f314af03fca4f
Signature
ed25519:8b35791b9d1d3f29fdc07efc7a2d4515003f1ca01819651700430b5e1031f87f27a50399917f9c6410c53a0f6f805a85f3f1c0b77d05d8d70d5582da048a0b04
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser