CONTINUOUS INTERNET TELEMETRY24H DRIFT9,041 material changesacross 8,629 domains · last 24h · -1,374 vs yesterdayDNS DRIFT567 domains changed DNS providertop destination cloudflare.com · -92 vs yesterdayEMAIL DRIFT143 domains switched email providertop destination google.com · -24 vs yesterdayCERT DRIFT189 domains switched issuing CA24h · -30 vs yesterdayNOW463 curated domains not reachable-240 vs yesterdaySITE ERRORS17,387 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,862 sites429 rate-limit / 403 bot-block, a posture signal

ppay.me

Observed Jul 24, 2026, 01:16 UTC (2h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Not responding
Email byGoogle Workspace
Also usesGoogle Search ConsoleMiroSlack
tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ppay.me actually stands on - every host below is a signed observation
ppay.me
NS
ns-1407.awsdns-47.orgns-1729.awsdns-24.co.ukns-438.awsdns-54.comns-560.awsdns-06.net
awsdns-47.org + awsdns-24.co.uk + moreanswers its DNS
MX
aspmx.l.google.comaspmx3.googlemail.commxa.mailgun.orgmxb.mailgun.org+3 more
Google Workspacereceives its email

DNS Records

MX 7

  • 1aspmx.l.google.com
  • 10aspmx3.googlemail.com
  • 10mxa.mailgun.org
  • 10mxb.mailgun.org
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com
  • 9ppay-me.mail.protection.outlook.com

TXT 14

  • MS=ms22404489
  • _globalsign-domain-verification=-dtsbPMTURok2V0ugHlXd8WCsNl4e_DMIcKaSt0Tfh
  • _globalsign-domain-verification=_aaMlEiDiEucljwf4ziR_H6K5YzOQ8JNLIX7r3507J
  • _globalsign-domain-verification=bWbLi12LUdTIGjtwbAiIrFcpN8_Z0b_SAa4E8kmKUZ
  • _globalsign-domain-verification=gxEogpKkLRnedfihro3mvOlXXfqRkKd62VmLilL7pn
  • globalsign-domain-verification=AJOapkn4nRXdvmwSUEhBuABhKmK-28lNedQf7tdGj5
  • globalsign-domain-verification=sohXMgQ8lp7QNeTIwpdrZ6gDTbpH8wxyRPwjGsdv5i
  • google-site-verification=c2c_JkFT1bWFNczS3_Z1fgXz-952RHEbqgENDWeHkHw
  • miro-verification=6815302978a13f01c0657e468a7c33eb118fe7aa
  • openai-domain-verification=dv-xNcB6uLeyjqPdsQMZxk8KidE

NS 4

  • ns-1407.awsdns-47.org
  • ns-1729.awsdns-24.co.uk
  • ns-438.awsdns-54.com
  • ns-560.awsdns-06.net

SOA 1

  • ns-560.awsdns-06.net awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ppay.me. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ppay.me <a href="https://domaindrift.io/t/ppay.me"> <img src="https://domaindrift.io/badge/ppay.me.svg" width="300" height="64" alt="DomainDrift signed observations for ppay.me"> </a>

Ed25519 Receipt

Receipt ID
rcpt_6037ec52e5c00632
Output Hash
b989f1df4fe0a19990a71f8420424ee048d44f0834256d6ab1c5da5e14c4571e
Signature
ed25519:dd2b1fe51fee7e92abf0525890a73e0d357a6c7e5ff98316a365b1feb1d502f7a78cfe06c48d00e2279303af55b95276b51f2aa9d2ead71b3b371bbe7b894105
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser