CONTINUOUS INTERNET TELEMETRY24H DRIFT1,754 material changesacross 1,559 domains · +332 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination yandexcloud.net · -19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -4 vs yesterdayNOW1,034 curated domains not answering+324 vs yesterdayERRORS4,652 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,775 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,754 material changesacross 1,559 domains · +332 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination yandexcloud.net · -19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -4 vs yesterdayNOW1,034 curated domains not answering+324 vs yesterdayERRORS4,652 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,775 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

levels.fyi

Observed 2026-07-18T01:35:25.433Z (7h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Also usesStripeFacebook/Meta
IPv6 · 7 subdomains · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat levels.fyi actually stands on - every host below is a signed observation
levels.fyi
A / AAAA
172.67.183.252104.21.96.1552606:4700:3034::ac43:b7fc2606:4700:3035::6815:609b
Cloudflareserves the site
NS
karina.ns.cloudflare.comernest.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
alt4.aspmx.l.google.comaspmx.l.google.comalt3.aspmx.l.google.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.levels.fyi/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time46 ms
DNS resolutionNOERROR
Redirect chain
https://www.levels.fyi/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 172.67.183.252
  • 104.21.96.155

AAAA 2

  • 2606:4700:3034::ac43:b7fc
  • 2606:4700:3035::6815:609b

MX 5

  • 10alt4.aspmx.l.google.com
  • 1aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 8

  • apple-domain-verification=gKmuTc1OWUHrEC8K
  • v=spf1 include:zoho.com include:_spf.google.com include:transmail.net include:amazonses.com -all
  • stripe-verification=96dba4e67054282d9ecacdb00dc84e79d34ec1d86c66631e852659f257b5a247
  • TAILSCALE-R6iBJexNyzr9DdC4nylY
  • facebook-domain-verification=bxr0peiww3neo2dx16c45d4p1qmsji
  • v=DMARC1; p=reject; rua=mailto:zaheer+dmarc@levels.fyi
  • v=DKIM1; (detected)
  • v=DNSSEC1; (detected)

NS 2

  • karina.ns.cloudflare.com
  • ernest.ns.cloudflare.com

SOA 1

  • ernest.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for levels.fyi. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for levels.fyi <a href="https://domaindrift.io/t/levels.fyi"> <img src="https://domaindrift.io/badge/levels.fyi.svg" width="300" height="64" alt="DomainDrift signed observations for levels.fyi"> </a>

Ed25519 Receipt

Receipt ID
c9b5df0a-1a7e-46ea-82fb-5b75c7aa4ad8
Output Hash
c3648375f7b84bf7ded1f7da99f2f5a280283946b4c1b5d5ed5cfcef884eabbe
Signature
ed25519:f17916cd864942221636329a4a66dfb0f67b0c33c4208d9790d104111dfd4c1fa2f393e8c91edb127a775d7be97e2e155d3dc7e4d814463c1cef20cf4c31570e
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser