CONTINUOUS INTERNET TELEMETRY24H DRIFT1,109 material changesacross 916 domains · -969 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination kirklanddc.com · -13 vs yesterdayNOW2,658 curated domains not answering+1,532 vs yesterdayERRORS17,461 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED44,850 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,109 material changesacross 916 domains · -969 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination kirklanddc.com · -13 vs yesterdayNOW2,658 curated domains not answering+1,532 vs yesterdayERRORS17,461 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED44,850 throttled or blocked our scanner429 rate-limit / 403 bot-block

shimo.im

Observed Jul 18, 2026, 19:10 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
10 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat shimo.im actually stands on - every host below is a signed observation
shimo.im
A / AAAA
116.205.2.136
Cloudflareserves the site
NS
ns3.dnsv4.comns4.dnsv4.com
dnsv4.comanswers its DNS
MX
mx.c5.icoremail.netmx3.c5.icoremail.netmx2.c5.icoremail.net
icoremail.netreceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time1192 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 116.205.2.136

MX 3

  • 5mx.c5.icoremail.net
  • 20mx3.c5.icoremail.net
  • 10mx2.c5.icoremail.net

TXT 2

  • v=spf1 include:spf.icoremail.net -all
  • 202008310000003t4ybqanzvqahskadj5vtlliufy2lrqk2yvaih1nmlimw5p2w9

NS 2

  • ns3.dnsv4.com
  • ns4.dnsv4.com

SOA 1

  • ns3.dnsv4.com enterprise2dnsadmin.dnspod.com

TLS Certificates (0)

None.

Subdomains (10)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for shimo.im. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for shimo.im <a href="https://domaindrift.io/t/shimo.im"> <img src="https://domaindrift.io/badge/shimo.im.svg" width="300" height="64" alt="DomainDrift signed observations for shimo.im"> </a>

Ed25519 Receipt

Receipt ID
1a1947ff-fba2-4a4b-826c-2ce8f854ba34
Output Hash
346295cb1218bed0ecc9671b59373327eedd6671ec4acb9f97a677059c309747
Signature
ed25519:0c132472517a66f23746389a083bf282e6884e6f94ed9de8eb5e9185e119d40277346353c5ec452e58915ca840b725b3da0a422fe846b8eaa821a56718e45d04
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser