thunderforest.com

Observed Jul 18, 2026, 17:41 UTC (15h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byMailgun

Registered withGandi SAS

Also usesGoogle Search Console

IPv6 · 3 subdomains · tranco_100k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat thunderforest.com actually stands on - every host below is a signed observation

thunderforest.com

A / AAAA

104.26.0.148172.67.72.46104.26.1.1482606:4700:20::ac43:482e+2 more

Cloudflareserves the site

jocelyn.ns.cloudflare.comneil.ns.cloudflare.com

cloudflare.comanswers its DNS

in2-smtp.messagingengine.comin1-smtp.messagingengine.com

Mailgunreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.thunderforest.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time25 ms

DNS resolutionNOERROR

Redirect chain

https://www.thunderforest.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 3

104.26.0.148
172.67.72.46
104.26.1.148

AAAA 3

2606:4700:20::ac43:482e
2606:4700:20::681a:194
2606:4700:20::681a:94

MX 2

20in2-smtp.messagingengine.com
10in1-smtp.messagingengine.com

TXT 4

google-site-verification=htW2ygojhy8v-iCVlGR30p7kNSU0QZhYglzziQyiD4o
v=spf1 a mx +ip4:77.72.1.34 include:spf.messagingengine.com include:spf.mandrillapp.com include:mailgun.org ~all
ahrefs-site-verification_2597cdf731b4d614bf8d8cb3d70bd4b3a14ca717a34f029cb0c6df695ede25e9
v=DMARC1; p=none;

NS 2

jocelyn.ns.cloudflare.com
neil.ns.cloudflare.com

SOA 1

jocelyn.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for thunderforest.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/thunderforest.com">
  <img src="https://domaindrift.io/badge/thunderforest.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for thunderforest.com">
</a>

Ed25519 Receipt

Receipt ID: de3f76c6-be09-45b0-9609-4a8961d4b102
Output Hash: ae5a3662807ebcc4d76c430b0079240e29c883056a7866e984d9bb18dad1ac73
Signature: ed25519:a80526dd191b265bed7de213eaae50915897539c57fe5790d8182e6306fa21b9ce6e43a0ce5b7e6ef588da9dd1ae37653073e584f9cf3c423923fd103ecf1d05
Public Key: ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/thunderforest.com