CONTINUOUS INTERNET TELEMETRY24H DRIFT6,252 material changesacross 6,130 domains · last 24h · +782 vs yesterdayDNS DRIFT201 domains changed DNS providertop destination parity.domains · +88 vs yesterdayEMAIL DRIFT28 domains switched email providertop destination outlook.comCERT DRIFT33 domains switched issuing CA24h · +7 vs yesterdayNOW585 curated domains not reachablelast probe, steadySITE ERRORS32,104 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 143,199 sites429 rate-limit / 403 bot-block, a posture signal

redshield.co

Observed Jul 26, 2026, 21:53 UTC (20h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Secured byAmazon
Also usesHubSpotGoogle Search ConsoleAtlassian
domcop
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat redshield.co actually stands on - every host below is a signed observation
redshield.co
A / AAAA
15.197.219.18015.197.90.13
Cloudflareserves the site
NS
ns-cloud-a4.googledomains.comns-cloud-a3.googledomains.comns-cloud-a2.googledomains.comns-cloud-a1.googledomains.com
googledomains.comanswers its DNS
MX
aspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
redshield.co
Amazonissued its certificate

DNS Records

A 2

  • 15.197.219.180
  • 15.197.90.13

MX 5

  • 1aspmx.l.google.com
  • 10aspmx2.googlemail.com
  • 10aspmx3.googlemail.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 9

  • MS=AA52474BA8F7CA2F1FD0351E8A23BF89E5CE464B
  • v=spf1 ip4:3.103.13.156/32 ip4:3.103.66.4/32 ip4:103.241.85.4/32 ip4:203.171.37.37/32 include:amazonses.com include:_spf.google.com include:servers.mcsv.net include:5718541.spf10.hubspotemail.net include:mail.zendesk.com -all
  • atlassian-sending-domain-verification=0726309a-1ed5-4e3e-954f-819da9083c41
  • amazonses:FUhFB35e+0O5/Wvn96u5D3o780uA6QfsEGSHVj1qvrs=
  • MS=ms99995593
  • google-site-verification=rpJ8aZw7K5iZVH8qtbDdNrrkhqa0o3brC-b5Ue7Rvw8
  • sfp8l7c3ct8plrnmtpn4v511ty1m7fkg
  • atlassian-domain-verification=8RqXhm90uuwUCwEobiqp5SYsnHM4a8/L2l0zQl3h5c2kjp00IQ519qhPYprKjswi
  • v=DMARC1; p=reject; pct=100

NS 4

  • ns-cloud-a4.googledomains.com
  • ns-cloud-a3.googledomains.com
  • ns-cloud-a2.googledomains.com
  • ns-cloud-a1.googledomains.com

SOA 1

  • ns-443.awsdns-55.com awsdns-hostmaster.amazon.com

TLS Certificates (2)

Common NameIssuerExpires
redshield.co C=US, O=Amazon, CN=Amazon RSA 2048 M01 Mon, 28 Dec 2026 23:59:59 +0000
Amazon RSA 2048 M01 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:21:28 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for redshield.co. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for redshield.co <a href="https://domaindrift.io/t/redshield.co"> <img src="https://domaindrift.io/badge/redshield.co.svg" width="300" height="64" alt="DomainDrift signed observations for redshield.co"> </a>

Ed25519 Receipt

Receipt ID
rcpt_a3f22b9e7c03a526
Output Hash
6d30e372d0d65de3439db48bc316a1ea5f2af6d01eea2161c1c92bb4bab756a3
Signature
ed25519:d16d5bf947a7ffa55eaf34053d50a9a228d4951f7e63b81abc4bf1f96b6031c8b97cc04c6b59251d6899d54ed53d9e26dcdf744ab1a489d6a389ad6c47371a05
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser