CONTINUOUS INTERNET TELEMETRY24H DRIFT7,541 material changesacross 7,227 domains · +6,632 vs yesterdayDNS DRIFT533 domains changed DNS providertop destination parity.domains · +507 vs yesterdayEMAIL DRIFT100 domains switched email providertop destination google.com · +92 vs yesterdayCERT DRIFT173 domains switched issuing CA24h · +150 vs yesterdayNOW1,670 curated domains not answering-1,040 vs yesterdayERRORS20,791 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED93,106 throttled or blocked our scanner429 rate-limit / 403 bot-block

service-now.com

Observed Jul 21, 2026, 19:59 UTC (19h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Guarded by a firewall
Runs onSERVICENOW
Secured byDigiCert
Registered withCSC Corporate Domains, Inc.
Also usesGoogle Search Console
1 subdomain · tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat service-now.com actually stands on - every host below is a signed observation
service-now.com
A / AAAA
148.139.192.125148.139.193.125
SERVICENOWserves the site
NS
aus1.akam.neteur6.akam.netusc4.akam.netuse1.akam.net+8 more
akam.net + ultradns.biz + moreanswers its DNS
MX
mx01.service-now.commx02.service-now.commx03.service-now.commx04.service-now.com
service-now.comreceives its email
TLS
*.service-now.com
DigiCert Incissued its certificate

DNS Records

A 2

  • 148.139.192.125
  • 148.139.193.125

MX 4

  • 10mx01.service-now.com
  • 10mx02.service-now.com
  • 10mx03.service-now.com
  • 10mx04.service-now.com

TXT 9

  • MS=ms74154376
  • _eqc5fmc6a19if8n4zuakknuit8r0eus
  • _wsu85ta6scogskj0cf00qirrzisonqq
  • _xln3eyqm0jwi0ufk1f8urbsrrjikhba
  • v=spf1 exists:%{ir}.spf.mail.service-now.com ~all
  • yahoo-verification-key=tSCs3azHZcA2PXH8v2diOdAsBfA1ILu6jXrugBSnkbs=
  • google-site-verification=Ja_kX8vmbMKl2RJlbiMDTDqoINbRsWCwlD514pybTNE
  • google-site-verification=aV0otFtAFf8E4oVgu6ETAkBM2rtsy1kb-B60OotOnUQ
  • v=DMARC1; p=reject; rua=mailto:256b7dd3@mxtoolbox.dmarc-report.com,mailto:f11ce6c582f6261@rep.dmarcanalyzer.com; ruf=mailto:256b7dd3@forensics.dmarc-report.com,mailto:f11ce6c582f6261@for.dmarcanalyzer.com; sp=reject; fo=1; ri=86400

NS 12

  • aus1.akam.net
  • eur6.akam.net
  • usc4.akam.net
  • use1.akam.net
  • use3.akam.net
  • usw1.akam.net
  • ns1-98.akam.net
  • edns140.ultradns.biz
  • edns140.ultradns.com
  • edns140.ultradns.net

SOA 1

  • edns140.ultradns.com root.service-now.com

CAA 4

  • iodef "mailto:domains-infrastructure@servicenow.com"
  • issue "digicert.com"
  • issue "entrust.net"
  • issue "letsencrypt.org"

TLS Certificates (2)

Common NameIssuerExpires
*.service-now.com C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 Fri, 13 Nov 2026 23:59:59 +0000
DigiCert Global G2 TLS RSA SHA256 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Sat, 29 Mar 2031 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for service-now.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for service-now.com <a href="https://domaindrift.io/t/service-now.com"> <img src="https://domaindrift.io/badge/service-now.com.svg" width="300" height="64" alt="DomainDrift signed observations for service-now.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_adfdf7faa7123c62
Output Hash
15ae1380f14fb9f960f096d871215303d3d9fb549e86a4e0ef75e7043c50f3d0
Signature
ed25519:1aef7f1dec862425c80d14704de3e05a2884e01538c5d0be4564b1d848af3604e194619cd0d60e1d4a06d65863cf44425d5c07185938e80cf599a6b1b16d6703
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser