CONTINUOUS INTERNET TELEMETRY24H DRIFT2,271 material changesacross 2,073 domains · +849 vs yesterdayDNS DRIFT4 domains changed DNS providertop destination cloudflare.com · -17 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT12 domains switched issuing CA24h · +12 vs yesterdayNOW1,033 curated domains not answering+323 vs yesterdayERRORS5,297 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,060 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,271 material changesacross 2,073 domains · +849 vs yesterdayDNS DRIFT4 domains changed DNS providertop destination cloudflare.com · -17 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT12 domains switched issuing CA24h · +12 vs yesterdayNOW1,033 curated domains not answering+323 vs yesterdayERRORS5,297 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,060 throttled or blocked our scanner429 rate-limit / 403 bot-block

royalmail.com

Observed 2026-07-18T12:07:36.088039263+00:00 (30m ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall
Runs onRadware
Email byMicrosoft 365
Secured byEntrust Limited
Registered withCSC Corporate Domains, Inc.
Also usesAtlassianGoogle Search Console
3 subdomains · logistics_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat royalmail.com actually stands on - every host below is a signed observation
royalmail.com
A / AAAA
77.95.81.226
Radwareserves the site
NS
dns2.consignia.comdns1.consignia.comns1.bt.net
consignia.com + bt.netanswers its DNS
MX
royalmail-com.mail.protection.outlook.com
Microsoft 365receives its email
TLS
*.royalmail.com
Entrust Limitedissued its certificate

DNS Records

A 1

  • 77.95.81.226

MX 1

  • 10royalmail-com.mail.protection.outlook.com

TXT 16

  • MS=ms71783426
  • MS=ms65356394
  • f5ae2424-16a6-4999-b5b2-bcf89a93769b
  • atlassian-domain-verification=MLNu07lyiFp2hHCeKQg6qKAhggTIuOi/O5bpxZ831VQQSawSTLMtodtcSc2SrBdJ
  • v=spf1 ip4:157.203.56.0/22 ip4:208.72.90.64/26 ip4:134.213.149.92/32 ip4:144.87.143.0/24 ip4:146.101.28.221/32 ip4:147.29.39.0/24 ip4:157.203.0.0/27 ip4:20.90.138.231/32 ip4:185.29.44.6/32 ip4:191.233.96.0/20 ip4:194.140.251.4/32 ip4:208.185.235.44/32 ip4:209.135.36.206/32 ip4:209.167.231.208/26 ip4:212.64.130.137/32 ip4:217.64.224.67/32 ip4:35.157.226.52/32 ip4:94.46.185.189/32 ip4:52.50.253.173/32 ip4:54.171.224.250/32 ip4:62.209.53.0/24 ip4:79.125.0.0/17 ip4:81.138.21.4/32 ip4:81.171.203.0/24 ip4:82.147.17.34/32 ip4:94.126.110.195/32 ip4:146.177.43.198/32 ip4:5.61.115.80/26 ip4:217.64.233.50 ip4:217.64.233.52 ip4:81.149.233.242 ip4:162.13.103.194 ip4:149.72.233.190 ip4:149.72.224.180 ip4:35.214.208.81/32 ip4:35.214.213.218/32 ip4:35.214.183.81/32 ip4:213.52.186.141/32 ip4:213.52.186.142/32 ip4:35.214.212.238/32 ip4:129.152.0.0/17 ip4:85.158.136.0/21 ip4:195.245.230.0/23 ip4:67.219.240.0/20 ip4:5.61.115.32/28 include:spf.mandrillapp.com include:amazonses.com include:spf.protection.outlook.com include:_spf.s...[truncated]
  • google-site-verification=MqeT05ffEOcQh7HPRTJesniXvl2K6oqKBiTUJRZuIV8
  • successfactors-site-verification=NDM1YTIxZWFmZWFhYTUzZDcxYzhjNzk4MTM4YTZlNmU2MDhlMzc0ZjNjOTIwNzhkYWM0ZDk0MWQ3OWJkZGU3OA==
  • access-domain-verification=e2602dab5e6377e9345fa3cee7dcfa5ea185239105373e0299519c14e78bd780
  • google-site-verification=mPPxSSOKErAnW-K7QuEZBgbNaIxwpyxJRJWrI1r-ULY
  • so4e1v2hi81j9r3h1nl7s2tc9h

NS 3

  • dns2.consignia.com
  • dns1.consignia.com
  • ns1.bt.net

SOA 1

  • dns1.consignia.com hostmaster.consignia.com

SRV 1

  • autodiscover.royalmailgroup.com:443 p0

TLS Certificates (4)

Common NameIssuerExpires
*.royalmail.com C=CA, O=Entrust Limited, CN=Entrust OV TLS Issuing RSA CA 2 Fri, 11 Sep 2026 23:59:59 +0000
Entrust OV TLS Issuing RSA CA 2 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 10 Dec 2027 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000
USERTrust RSA Certification Authority C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for royalmail.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for royalmail.com <a href="https://domaindrift.io/t/royalmail.com"> <img src="https://domaindrift.io/badge/royalmail.com.svg" width="300" height="64" alt="DomainDrift signed observations for royalmail.com"> </a>

Ed25519 Receipt

Receipt ID
643ed7f7-1179-4514-ba19-78dbba4fcd53
Output Hash
0dea50a9937565b8a2465b1f22f610636423ec8cd36398c341d2880b47af462c
Signature
ed25519:1397f80e192cb4082ec664f3d080fe58dd567a33c7fa4964e24938138b5cc5976333fe987a0e7f2abaf7afd33295cfec47878d959e5612220993bf7dc014bf0e
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser