CONTINUOUS INTERNET TELEMETRY24H DRIFT181 material changesacross 125 domains · +35 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,539 curated domains not answering+205 vs yesterdayERRORS29,980 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,357 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT181 material changesacross 125 domains · +35 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,539 curated domains not answering+205 vs yesterdayERRORS29,980 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,357 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

paytmmall.com

Observed Jul 18, 2026, 12:24 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Email byGoogle Workspace
Secured byDigiCert
Also usesAtlassian
IPv6 · 1 subdomain · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat paytmmall.com actually stands on - every host below is a signed observation
paytmmall.com
A / AAAA
23.47.28.162600:1408:ec00:286::39342600:1408:ec00:29a::3934
2600serves the site
NS
a6-64.akam.neta11-65.akam.neta16-64.akam.neta1-49.akam.net+2 more
akam.netanswers its DNS
MX
aspmx3.googlemail.comaspmx2.googlemail.comalt2.aspmx.l.google.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
*.paytmmall.com
DigiCert Incissued its certificate

DNS Records

A 1

  • 23.47.28.16

AAAA 2

  • 2600:1408:ec00:286::3934
  • 2600:1408:ec00:29a::3934

MX 5

  • 10aspmx3.googlemail.com
  • 10aspmx2.googlemail.com
  • 5alt2.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 1aspmx.l.google.com

TXT 11

  • v=spf1 include:mail.zendesk.com include:_spf.salesforce.com include:aspmx.pardot.com include:sendgrid.net include:_spf.google.com include:amazonses.com ip4:54.179.186.39/32 ip4:54.251.151.39/32 ip4:52.74.28.141/32 ip4:52.76.104.219/32 -all
  • 2skhb2kcs858rjtwy3hdrf3qmx1tfkrj
  • 0k0vlr2tpt7rhqhw83d0jx176z7j1bw5
  • MS=ms63465846
  • MS=02EF65192528A305D973A8514C24C4ECBDB28593
  • amazonses:7BiF5N/F2C1QaFn/EiR3+MiEWU1HgM486XxlUrCd49c=
  • include:910033d5.spf2.netcorecloud.net
  • _o8z2fciafq1w61v9ootgg3zts3kv3aa
  • atlassian-domain-verification=YH8lFqAPvU83GukwObgUwldiS3lR8ABZOQbVsRcSXG-FRyd8nOyEm4B/YBcLCsN1
  • 9gycgf31vhr5s9p94vjny343d6f8ps46

NS 6

  • a6-64.akam.net
  • a11-65.akam.net
  • a16-64.akam.net
  • a1-49.akam.net
  • a7-67.akam.net
  • a12-65.akam.net

SOA 1

  • a1-49.akam.net hostmaster.paytmmall.com

TLS Certificates (2)

Common NameIssuerExpires
*.paytmmall.com C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=GeoTrust TLS RSA CA G1 Sun, 18 Oct 2026 23:59:59 +0000
GeoTrust TLS RSA CA G1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Tue, 02 Nov 2027 12:23:37 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for paytmmall.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for paytmmall.com <a href="https://domaindrift.io/t/paytmmall.com"> <img src="https://domaindrift.io/badge/paytmmall.com.svg" width="300" height="64" alt="DomainDrift signed observations for paytmmall.com"> </a>

Ed25519 Receipt

Receipt ID
1935b778-da99-4bc6-bd30-057cb124a4bd
Output Hash
6f03fc116a464af0710ae8244b6dc20f47b1054642bc88bd3b095958ed68963d
Signature
ed25519:91876825b48663b662765c03b15851b9e0571a89f78db2ddbfcb51ec4a97be42f4f7e6ecbee15c86b884e394b0b93b74caeafdd97208870896661315b227260f
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser