CONTINUOUS INTERNET TELEMETRY24H DRIFT7,587 material changesacross 7,432 domains · last 24h · -1,247 vs yesterdayDNS DRIFT207 domains changed DNS providertop destination cloudflare.com · -70 vs yesterdayEMAIL DRIFT48 domains switched email providertop destination outlook.com · -6 vs yesterdayCERT DRIFT66 domains switched issuing CA24h · -7 vs yesterdayNOW509 curated domains not reachable-48 vs yesterdaySITE ERRORS34,066 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 146,011 sites429 rate-limit / 403 bot-block, a posture signal

redcanary.com

Observed Jul 27, 2026, 22:19 UTC (9h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Email byGoogle Workspace
Secured byLet's Encrypt
Also usesStripeGoogle Search ConsoleAtlassianDocuSign
tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat redcanary.com actually stands on - every host below is a signed observation
redcanary.com
A / AAAA
104.198.136.223
unattributedserves the site
NS
ns15.dnsmadeeasy.comns14.dnsmadeeasy.comns13.dnsmadeeasy.comns10.dnsmadeeasy.com+2 more
dnsmadeeasy.comanswers its DNS
MX
aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.com+1 more
Google Workspacereceives its email
TLS
redcanary.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 104.198.136.223

MX 5

  • 10aspmx.l.google.com
  • 20alt1.aspmx.l.google.com
  • 30alt2.aspmx.l.google.com
  • 40aspmx2.googlemail.com
  • 50aspmx3.googlemail.com

TXT 20

  • atlassian-sending-domain-verification=4879176f-e06e-44e4-b000-8f3c8e0215da
  • stripe-verification=D862CA04F88E53B3CF032CE87E750F113F6E89882435F443703BEF4F222D36F8
  • google-site-verification=2bwXDjSmYK1ighcDO_4pxZ-48ES4lfI4gCLiZVgM4gk
  • zapier-domain-verification-challenge=f2d6d111-56d7-4c93-8ffc-2ac7d7cb9a40
  • canva-site-verification=beDVUW_zNK3b1jDH4h0Iig
  • google-site-verification=HV_P9w9Xa7Mo1cUNEzNC0zegEnLij9VHPUdSvm5sK60
  • atlassian-domain-verification=hVmjGas5xRuPw4/P01BBRLYTjeHSSUhDxOMsZmvYZaKWRUnHUyNFvNBIEUkNww7O
  • docusign=a2644096-6ba4-4102-88b0-80cd0c015208
  • onetrust-domain-verification=cb6f1419299e4a70bf2d8abe12601eef
  • google-site-verification=fj36aAnfUreVGk-rhCteMWjG-Pd90NcgYngeGdlqS_s

NS 6

  • ns15.dnsmadeeasy.com
  • ns14.dnsmadeeasy.com
  • ns13.dnsmadeeasy.com
  • ns10.dnsmadeeasy.com
  • ns12.dnsmadeeasy.com
  • ns11.dnsmadeeasy.com

SOA 1

  • ns20.digicertdns.com dns.digicertdns.com

TLS Certificates (3)

Common NameIssuerExpires
redcanary.com C=US, O=Let's Encrypt, CN=YR1 Wed, 14 Oct 2026 02:23:33 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for redcanary.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for redcanary.com <a href="https://domaindrift.io/t/redcanary.com"> <img src="https://domaindrift.io/badge/redcanary.com.svg" width="300" height="64" alt="DomainDrift signed observations for redcanary.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_56ebf2ae2c883e29
Output Hash
b83de1a4a0e8be28b75f507049a466209667978ed2e1d6f362bf56772138b984
Signature
ed25519:39ff9b27535c8ccdc1b1d2497e68dc2ab59a327a315dce27113e43508ae72cf94a7690090449318c4307ebbcd18cf17745d15282fe654a7b7ce87d4a2c723209
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser