urlscan.io

Observed Jul 24, 2026, 20:10 UTC (8d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Email byGoogle Workspace

Secured byLet's Encrypt

Also usesGoogle Search Console

tranco

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat urlscan.io actually stands on - every host below is a signed observation

urlscan.io

A / AAAA

49.12.22.106

unattributedserves the site

ns-1198.awsdns-21.orgns-1558.awsdns-02.co.ukns-483.awsdns-60.comns-940.awsdns-53.net

awsdns-21.org + awsdns-02.co.uk + moreanswers its DNS

aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

urlscan.io

Let's Encryptissued its certificate

DNS Records

A 1

49.12.22.106

MX 5

1aspmx.l.google.com
10alt3.aspmx.l.google.com
10alt4.aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com

TXT 4

google-site-verification=7xPs7Atnb1EgiDKcrE8nIi4OFX5qPogpH_KCxkot7D4
google-site-verification=wnDEcrkl2YX6qfKYzO7oAtAx_6fetr3zo_-iFeZWf1c
v=spf1 include:_spf.mlsend.com include:mailgun.org include:_spf.google.com include:servers.mcsv.net -all
v=DMARC1; p=quarantine; pct=100; rua=mailto:johannes@urlscan.io

NS 4

ns-1198.awsdns-21.org
ns-1558.awsdns-02.co.uk
ns-483.awsdns-60.com
ns-940.awsdns-53.net

SOA 1

ns-1198.awsdns-21.org awsdns-hostmaster.amazon.com

TLS Certificates (4)

Common Name	Issuer	Expires
`urlscan.io`	C=US, O=Let's Encrypt, CN=YE2	Sun, 04 Oct 2026 05:50:12 +0000
`YE2`	C=US, O=ISRG, CN=Root YE	Sat, 02 Sep 2028 23:59:59 +0000
`Root YE`	C=US, O=Internet Security Research Group, CN=ISRG Root X2	Thu, 02 Sep 2032 23:59:59 +0000
`ISRG Root X2`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for urlscan.io. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/urlscan.io">
  <img src="https://domaindrift.io/badge/urlscan.io.svg"
       width="300" height="64" alt="DomainDrift signed observations for urlscan.io">
</a>

Ed25519 Receipt

Receipt ID: rcpt_6077feba2031c27b
Output Hash: 5b7b30fbc1a3e1f0b980975b411e400bfe794f13415a2a44bcc9073174b07fc0
Signature: ed25519:71c9840a7a0542a11367d93fe46c443f9bd59ffbb40d25da8f90b96b0e161edb2a44838bcd9658f553b1da028f473b8e47532541b66a23db4608060c1eb9ac00
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/urlscan.io