CONTINUOUS INTERNET TELEMETRY24H DRIFT2,077 material changesacross 1,868 domains · -474 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,391 curated domains not answeringlast probe, steadyERRORS10,886 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,077 material changesacross 1,868 domains · -474 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,391 curated domains not answeringlast probe, steadyERRORS10,886 responded with an errorlast probe · 5xx / 404 / 429 / 403

mediafire.com

Observed 2026-07-13T21:17:11.303Z (8h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Registered withCloudflare, Inc.
Also usesFacebook/MetaStripe
95 subdomains · tranco_1k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat mediafire.com actually stands on - every host below is a signed observation
mediafire.com
A / AAAA
104.17.147.83104.17.148.83
Cloudflareserves the site
NS
ken.ns.cloudflare.comlisa.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
aspmx.l.google.comalt3.aspmx.l.google.comalt2.aspmx.l.google.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 302 → https://www.mediafire.com/
HTTP status302
Servercloudflare
TLS protocolHTTP/3
TLS issuernot observed
Behind Cloudflareyes
Response time77 ms
DNS resolutionNOERROR
Redirect chain
https://www.mediafire.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 104.17.147.83
  • 104.17.148.83

MX 5

  • 1aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com

TXT 11

  • facebook-domain-verification=7013nxzoo8yooycncjcprys8wakasp
  • Sendinblue-code:0e1b0689bf616ee1b3858d37db89dc41
  • stripe-verification=E05AE9B012072FD7247E0526190AB4D63222742C0C66889CE700CDEF3E86423A
  • gridinsoft-verify=a12lasg2a2coqalpzpo4vxvxiw0hdm5i4kdouyze6xz3mvalo1meh5an2ci6th8r
  • stripe-verification=641fa251ed29bd9396b7b1e8870d7c005eec221e7c74adb4bec07ef0040e0795
  • facebook-domain-verification=dcrdstbacm7lya00lby6c3t8cfhov6
  • ahrefs-site-verification_f9a61f3b67e1dc2c6d0c26cccde18e26025778b7851a12c8179d80a0a91ef4e4
  • v=spf1 include:email-secure.mediafire.com include:_spf.google.com include:spf.sendinblue.com include:mail.zendesk.com -all
  • v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:rua-import-29277@sendforensics.com
  • v=DKIM1; (detected)

NS 2

  • ken.ns.cloudflare.com
  • lisa.ns.cloudflare.com

SOA 1

  • ken.ns.cloudflare.com dns.cloudflare.com

CAA 12

  • issuewild comodoca.com
  • issue digicert.com; cansignhttpexchanges=yes
  • issue comodoca.com
  • issue letsencrypt.org
  • issuewild letsencrypt.org
  • issuewild sectigo.com
  • issue sectigo.com
  • issue pki.goog; cansignhttpexchanges=yes
  • issuewild digicert.com; cansignhttpexchanges=yes
  • issue ssl.com

TLS Certificates (0)

None.

Subdomains (95)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mediafire.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for mediafire.com <a href="https://domaindrift.io/t/mediafire.com"> <img src="https://domaindrift.io/badge/mediafire.com.svg" width="300" height="64" alt="DomainDrift signed observations for mediafire.com"> </a>

Ed25519 Receipt

Receipt ID
010e8be6-2625-4e78-8a48-bd63de33a89c
Output Hash
05f1bfc3b45319b84710fd924ad725bc16e8baea7333faf995583b6f8b18a9c4
Signature
ed25519:78fd1ff3bb6a59350ae6ca1764a7b6e2a85bea7b38afae5c860a12bc1b6e9518232183086b2132bdd8e21c008e6bc4f4c9c707b2a254fa14daf2b732e5d7970a
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser