nextdns.io

Observed Jul 18, 2026, 12:09 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle Workspace

Secured byLet's Encrypt

Also usesGoogle Search Console

IPv6 · 1 subdomain · cybersecurity_expanded

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat nextdns.io actually stands on - every host below is a signed observation

nextdns.io

A / AAAA

104.26.10.186104.26.11.186172.67.68.892606:4700:20::681a:aba+2 more

Cloudflareserves the site

lee.ns.cloudflare.comdawn.ns.cloudflare.com

cloudflare.comanswers its DNS

aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

nextdns.io

Let's Encryptissued its certificate

DNS Records

A 3

104.26.10.186
104.26.11.186
172.67.68.89

AAAA 3

2606:4700:20::681a:aba
2606:4700:20::681a:bba
2606:4700:20::ac43:4459

MX 5

1aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com
10alt3.aspmx.l.google.com
10alt4.aspmx.l.google.com

TXT 13

-8ZfHKAtbLgBlBrUutc2GfK7BO33knb10ISXEiheEnk
HT9_vtgqnj6pGv0ShGbz-nbz1mXymk6lai9IwUfJlzU
IZ90qnatjSWwh4OSf9hsxg6emyRmBSzT7N_-QZoDb9I
Zs76B2Kk_NhGNM5l4K2tDQBonKIrLcVfX6z8_bniQoM
_Dzy0hO_PIf4Gb6o2z8o1Wh7Ubo33gWCqmmLkSORemQ
t9C8s7yF-FKxuadWr-l6tzvgcuwSyIeMfCxDHrRVebE
z-24kE-Ryz_ULIwNW1WG_gQ9hOrOZKJyEjBOAuhXIGc
v=spf1 include:_spf.google.com include:mail.zendesk.com ~all
google-site-verification=O_e1ZFyWw-S7eaBK4KK9hoAB-U0JAtgZdfv0Tnd-2zE
google-site-verification=ZPlTqQ0CCGnda50YKmPiOTO2ofzz4J8d0ftYzwkSJJQ

NS 2

lee.ns.cloudflare.com
dawn.ns.cloudflare.com

SOA 1

dawn.ns.cloudflare.com dns.cloudflare.com

CAA 16

iodef "mailto:admins@nextdns.io"
issue "cloudflare.com"
issue "comodoca.com"
issue "digicert.com; cansignhttpexchanges=yes"
issue "letsencrypt.org"
issue "pki.goog; cansignhttpexchanges=yes"
issue "sectigo.com"
issue "ssl.com"
issue "zerossl.com"
issuewild "comodoca.com"

TLS Certificates (4)

Common Name	Issuer	Expires
`nextdns.io`	C=US, O=Let's Encrypt, CN=YE2	Fri, 02 Oct 2026 17:44:07 +0000
`YE2`	C=US, O=ISRG, CN=Root YE	Sat, 02 Sep 2028 23:59:59 +0000
`Root YE`	C=US, O=Internet Security Research Group, CN=ISRG Root X2	Thu, 02 Sep 2032 23:59:59 +0000
`ISRG Root X2`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

trr.dns.nextdns.io

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nextdns.io. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/nextdns.io">
  <img src="https://domaindrift.io/badge/nextdns.io.svg"
       width="300" height="64" alt="DomainDrift signed observations for nextdns.io">
</a>

Ed25519 Receipt

Receipt ID: b9a4b48e-b5a9-4636-b18b-cffbcae526f3
Output Hash: d875799bec115d6b83502264455da9a8ad038e863e524a50b3c8c3b3b7234bd6
Signature: ed25519:6c115dbca04e76e70211fc949f826855558f52b6b183f0be098ad20aa656d663650aedabbb984e65c0026de34619d76ec334bffdb09a1ef0ed8168c67ada440e
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/nextdns.io