CONTINUOUS INTERNET TELEMETRY24H DRIFT2,850 material changesacross 2,557 domains · -548 vs yesterdayDNS DRIFT20 domains changed DNS providertop destination cloudflare.com · -7 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination h-email.net · -1 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,329 curated domains not answering-6,389 vs yesterdayERRORS10,947 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,850 material changesacross 2,557 domains · -548 vs yesterdayDNS DRIFT20 domains changed DNS providertop destination cloudflare.com · -7 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination h-email.net · -1 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,329 curated domains not answering-6,389 vs yesterdayERRORS10,947 responded with an errorlast probe · 5xx / 404 / 429 / 403

mega.io

Observed 2026-07-13T08:18:03.825Z (8h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Also usesGoogle Search Console
IPv6 · 4 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat mega.io actually stands on - every host below is a signed observation
mega.io
A / AAAA
66.203.127.2389.44.169.13289.44.169.13466.203.127.13+10 more
Cloudflareserves the site
NS
nslu1.mega.co.nznsnl1.mega.co.nznslu2.mega.co.nznsnl2.mega.co.nz
mega.co.nzanswers its DNS
MX
mail.mega.co.nz
mega.co.nzreceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time801 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 7

  • 66.203.127.23
  • 89.44.169.132
  • 89.44.169.134
  • 66.203.127.13
  • 66.203.124.37
  • 66.203.127.11
  • 66.203.127.24

AAAA 7

  • 2a0b:e40:3::24
  • 2a0b:e40:3::11
  • 2a0b:e40:3::13
  • 2001:678:25c:2215::550
  • 2a0b:e40:3::23
  • 2001:678:25c:2215::552
  • 2a0b:e46:1:50::37

MX 1

  • 10mail.mega.co.nz

TXT 3

  • v=spf1 include:mega.co.nz -all
  • google-site-verification=JQ6dANtoKE5Fg2Nh00-ZEnC_upOs0W1e8ufKmR7hMYE
  • v=DMARC1; p=reject; adkim=s; aspf=s; ri=86400

NS 4

  • nslu1.mega.co.nz
  • nsnl1.mega.co.nz
  • nslu2.mega.co.nz
  • nsnl2.mega.co.nz

SOA 1

  • nslu1.mega.co.nz hostmaster.mega.co.nz

CAA 2

  • issue sectigo.com
  • issue letsencrypt.org

TLS Certificates (0)

None.

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mega.io. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for mega.io <a href="https://domaindrift.io/t/mega.io"> <img src="https://domaindrift.io/badge/mega.io.svg" width="300" height="64" alt="DomainDrift signed observations for mega.io"> </a>

Ed25519 Receipt

Receipt ID
99d7d9c6-c0ef-441c-9b56-e8f8788e048b
Output Hash
ab6531861b74eac6b839653bf45d747f30846841af3dbc6423d9586cea142aca
Signature
ed25519:f7237ae790efd49ca5c01f5ab0869b652cc9d32b23b9965047528a171ce57bee25d6957b7e8a485f677a19ecc1ffae25794e21a53cfc45e6951fd0ba09f0970b
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser