CONTINUOUS INTERNET TELEMETRY24H DRIFT3,243 material changesacross 2,875 domains · -155 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination cloudflare.com · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,305 curated domains not answering-6,413 vs yesterdayERRORS10,964 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,243 material changesacross 2,875 domains · -155 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination cloudflare.com · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,305 curated domains not answering-6,413 vs yesterdayERRORS10,964 responded with an errorlast probe · 5xx / 404 / 429 / 403

mailbox.org

Observed 2026-07-13T01:41:04.717Z (7h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Also usesGoogle Search Console
IPv6 · 18 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat mailbox.org actually stands on - every host below is a signed observation
mailbox.org
A / AAAA
185.97.174.352001:67c:2050:b100:1:443:0:184
Cloudflareserves the site
NS
dns4.cloudns.netdns3.cloudns.netns2.jpberlin.dens3.jpberlin.de+1 more
cloudns.net + jpberlin.deanswers its DNS
MX
mx-n.mailbox.orgmx4.mailbox.orgmx2.mailbox.orgmx3.mailbox.org+1 more
mailbox.orgreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://mailbox.org/de/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time781 ms
DNS resolutionNOERROR
Redirect chain
https://mailbox.org/de/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 185.97.174.35

AAAA 1

  • 2001:67c:2050:b100:1:443:0:184

MX 5

  • 50mx-n.mailbox.org
  • 10mx4.mailbox.org
  • 10mx2.mailbox.org
  • 10mx3.mailbox.org
  • 10mx1.mailbox.org

TXT 9

  • swisssign-check=1tuXIQOBa4NZh2EIQI5nFD8fbJW2EvxB6W8rYhAoQ5
  • google-site-verification=ojrG-cXIWNDWMmRomplDCsZknBUmg2PO32SffP1Xy2E
  • have-i-been-pwned-verification=aa98600469e4f52f5b4c8e6952a0927d
  • v=spf1 ip4:213.203.238.0/25 ip4:195.10.208.0/24 ip4:91.198.250.0/24 ip4:80.241.56.0/21 ip6:2001:67c:2050::/48 mx ~all
  • google-site-verification=bCdtsEmyfsVIfzBgWZpEvCf3TeJgpw0f6x5miXGwakY
  • mailru-verification: 0c2c482975b1fc2f
  • v=DMARC1; p=reject; adkim=r; aspf=r; pct=100; rua=mailto:abuse+arf@heinlein-support.de; rf=afrf; fo=1;
  • v=STSv1;id=20261606010000
  • v=DNSSEC1; (detected)

NS 5

  • dns4.cloudns.net
  • dns3.cloudns.net
  • ns2.jpberlin.de
  • ns3.jpberlin.de
  • ns.jpberlin.de

SOA 1

  • ns.jpberlin.de root.jpberlin.de

CAA 5

  • issue swisssign.com
  • issue digicert.com
  • issue letsencrypt.org
  • iodef mailto:security@heinlein-support.de
  • iodef mailto:mail@heinlein-support.de

TLS Certificates (0)

None.

Subdomains (18)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mailbox.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for mailbox.org <a href="https://domaindrift.io/t/mailbox.org"> <img src="https://domaindrift.io/badge/mailbox.org.svg" width="300" height="64" alt="DomainDrift signed observations for mailbox.org"> </a>

Ed25519 Receipt

Receipt ID
79b79251-bbee-4dd0-bfc6-9604dad571ef
Output Hash
4d29d85ff755c9aa0b924eb76ea206a1acae029a48c41355af79c0dff38a0a42
Signature
ed25519:81419aaa4a665b9429aa18b455b2378d07b68c2e9d08a35aaa7f990c90e17ba3c2f1b064ac92e1b3cec1b1e7fed53203a08e4f07c2d0aa7c2f28db74e2915b03
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser