CONTINUOUS INTERNET TELEMETRY24H DRIFT1,956 material changesacross 1,760 domains · -3 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination parity.domains · +2 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · +2 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW3,467 curated domains not answeringlast probe, steadyERRORS8,536 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,334 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,956 material changesacross 1,760 domains · -3 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination parity.domains · +2 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · +2 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW3,467 curated domains not answeringlast probe, steadyERRORS8,536 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,334 throttled or blocked our scanner429 rate-limit / 403 bot-block

startmail.com

Observed 2026-07-14T22:13:49.521Z (13h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byZendesk
Registered withHosting Concepts B.V. d/b/a Registrar.eu
Also usesGoogle Search Console
IPv6 · 7 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat startmail.com actually stands on - every host below is a signed observation
startmail.com
A / AAAA
145.131.90.152145.131.90.1362a02:22a0:bbb6:1d00::1002:4432a02:22a0:bbb6:1d00::1001:443
Cloudflareserves the site
NS
dns31.cloudns.netdns32.cloudns.netdns33.cloudns.netdns34.cloudns.net
cloudns.netanswers its DNS
MX
mx1.startmail.commx4.startmail.commx3.startmail.commx2.startmail.com
Zendeskreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.startmail.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time160 ms
DNS resolutionNOERROR
Redirect chain
https://www.startmail.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 145.131.90.152
  • 145.131.90.136

AAAA 2

  • 2a02:22a0:bbb6:1d00::1002:443
  • 2a02:22a0:bbb6:1d00::1001:443

MX 4

  • 10mx1.startmail.com
  • 30mx4.startmail.com
  • 20mx3.startmail.com
  • 10mx2.startmail.com

TXT 6

  • google-site-verification=C657dqp16Y0cGcLHCmZHmMsaaIVeprybtgiRi_DukZE
  • google-site-verification=p92r087LlIf2FNd7HXto_b9YGxOJ7kZgzctnVDneKxI
  • v=spf1 include:spf.startmail.com include:mail.zendesk.com ~all
  • v=DMARC1; p=quarantine; sp=quarantine; adkim=r; aspf=r; pct=100
  • v=STSv1; id=2023100501
  • v=DNSSEC1; (detected)

NS 4

  • dns31.cloudns.net
  • dns32.cloudns.net
  • dns33.cloudns.net
  • dns34.cloudns.net

SOA 1

  • dns31.cloudns.net support.cloudns.net

CAA 3

  • iodef mailto:root@startmail.com
  • issuewild letsencrypt.org
  • issue letsencrypt.org

TLS Certificates (0)

None.

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for startmail.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for startmail.com <a href="https://domaindrift.io/t/startmail.com"> <img src="https://domaindrift.io/badge/startmail.com.svg" width="300" height="64" alt="DomainDrift signed observations for startmail.com"> </a>

Ed25519 Receipt

Receipt ID
4b9c722d-feab-4ff8-b860-f80e307ca9e4
Output Hash
0bcce5e67ea51f276d43b9cd2951b97665e7843199ef3a20729bfe92a9fcf4a6
Signature
ed25519:8daebb6afe4b9c2f1a748b4f0cf5fca49682d0dbe42f1ba499b6f23181ef9ed3e0e8996e184e0a9384318f8725652800556d3d93a580a8d39273bf1415556305
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser