pypa.io

Observed Jul 22, 2026, 00:42 UTC (3h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onCloudflare

Email byGoogle Workspace

Secured byLet's Encrypt

Also usesGoogle Search Console

tranco_40k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat pypa.io actually stands on - every host below is a signed observation

pypa.io

A / AAAA

159.89.245.108167.99.21.118

Cloudflareserves the site

ns-1411.awsdns-48.orgns-1726.awsdns-23.co.ukns-485.awsdns-60.comns-893.awsdns-47.net

awsdns-48.org + awsdns-23.co.uk + moreanswers its DNS

aspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.comalt1.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

pypa.io

Let's Encryptissued its certificate

DNS Records

A 2

159.89.245.108
167.99.21.118

MX 5

1aspmx.l.google.com
10aspmx2.googlemail.com
10aspmx3.googlemail.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com

TXT 3

_globalsign-domain-verification=6GywlC8PVV6mLfL6ToMeVqCDeqFk9IDu2uEqmYPqx3
google-site-verification=OCg4wG6rcPlGYjre29eQ-qIhCrvk-rs3cYMcFLSt-q8
libera-1298aas

NS 4

ns-1411.awsdns-48.org
ns-1726.awsdns-23.co.uk
ns-485.awsdns-60.com
ns-893.awsdns-47.net

SOA 1

ns-1411.awsdns-48.org awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common Name	Issuer	Expires
`pypa.io`	C=US, O=Let's Encrypt, CN=YR1	Sat, 19 Sep 2026 13:36:53 +0000
`YR1`	C=US, O=ISRG, CN=Root YR	Sat, 02 Sep 2028 23:59:59 +0000
`Root YR`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for pypa.io. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/pypa.io">
  <img src="https://domaindrift.io/badge/pypa.io.svg"
       width="300" height="64" alt="DomainDrift signed observations for pypa.io">
</a>

Ed25519 Receipt

Receipt ID: rcpt_3dda095c4bfc145c
Output Hash: 8f829717ca390370ed7e6b7a9199c7acd5a14dff2757b864fabddbd951a81482
Signature: ed25519:660d34b88eb0df6cf078dae110a6e571adf4f6ec531fa2b1a9d56190cdc4766a2b8a7e3d52888a8e4530ac28cd0332a4953418f45c8a0cb1e14bc12f58ff1501
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/pypa.io