metasleuth.io

Observed Aug 11, 2026, 04:44 UTC (6d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of metasleuth.io was taken 6d ago

metasleuth.io is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting metasleuth.io under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch metasleuth.io Watching a domain needs a DRM3 account. The reading above stays free and public either way.

Verify this receipt yourself + Watch this domain

Up right now

Email byGoogle Workspace

Secured byAmazon

Also usesGoogle Search Console

IPv6 · domcop

Every line above is a signed observation. Check the math at the bottom of the page.

DRIFT

Steady. No change on record for metasleuth.io in the last day; this reading matches the one before it. The steady record is signed like every other reading. Watch it to catch the next move the moment it lands.

INFRASTRUCTURE MAPwhat metasleuth.io actually stands on - every host below is a signed observation

metasleuth.io

A / AAAA

3.171.85.593.171.85.1143.171.85.193.171.85.26+8 more

2600serves the site

maxine.ns.cloudflare.comrajeev.ns.cloudflare.com

cloudflare.comanswers its DNS

aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

*.blocksec.com

Amazonissued its certificate

DNS Records

A 4

3.171.85.59
3.171.85.114
3.171.85.19
3.171.85.26

AAAA 8

2600:9000:28a9:ca00:e:9c4b:fc40:93a1
2600:9000:28a9:5800:e:9c4b:fc40:93a1
2600:9000:28a9:4e00:e:9c4b:fc40:93a1
2600:9000:28a9:2200:e:9c4b:fc40:93a1
2600:9000:28a9:e200:e:9c4b:fc40:93a1
2600:9000:28a9:7c00:e:9c4b:fc40:93a1
2600:9000:28a9:c600:e:9c4b:fc40:93a1
2600:9000:28a9:dc00:e:9c4b:fc40:93a1

MX 5

1aspmx.l.google.com
10alt3.aspmx.l.google.com
10alt4.aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com

TXT 2

google-site-verification=2HLaVdAFPYUYX62RI8HVtexc5pRjqGFPEoafZ4pLv44
v=spf1 include:_spf.google.com -all

NS 2

maxine.ns.cloudflare.com
rajeev.ns.cloudflare.com

SOA 1

maxine.ns.cloudflare.com dns.cloudflare.com

DMARC_RECORDS 1

v=DMARC1; p=reject; ruf=mailto:mailabuse@blocksec.com; rua=mailto:mailabuse@blocksec.com; sp=reject; adkim=s; aspf=s

TLS Certificates (3)

Common Name	Issuer	Expires
`*.blocksec.com`	C=US, O=Amazon, CN=Amazon RSA 2048 M01	Sat, 06 Feb 2027 23:59:59 +0000
`Amazon RSA 2048 M01`	C=US, O=Amazon, CN=Amazon Root CA 1	Fri, 23 Aug 2030 22:21:28 +0000
`Amazon Root CA 1`	C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2	Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID: rcpt_1248c3e930830d8e
Output Hash: 33ab421cbac4137ba0e6ff425c7d8ce29e03d0716b6b97a8681664ae6542820a
Signature: ed25519:78dc91e7411a9a71ebabec436f8a157af148ca8c377203fd7d8c21a8bbcd7191b5da7c01027be9ff7b662cbbe268c8010231335125f9e71b7c4526b940f9db0a
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/metasleuth.io