CONTINUOUS INTERNET TELEMETRY24H DRIFT2,567 material changesacross 2,362 domains · +1,145 vs yesterdayDNS DRIFT9 domains changed DNS providertop destination cloudflare.com · -12 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +3 vs yesterdayCERT DRIFT32 domains switched issuing CA24h · +32 vs yesterdayNOW347 curated domains not answering-363 vs yesterdayERRORS2,271 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,362 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,567 material changesacross 2,362 domains · +1,145 vs yesterdayDNS DRIFT9 domains changed DNS providertop destination cloudflare.com · -12 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +3 vs yesterdayCERT DRIFT32 domains switched issuing CA24h · +32 vs yesterdayNOW347 curated domains not answering-363 vs yesterdayERRORS2,271 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,362 throttled or blocked our scanner429 rate-limit / 403 bot-block

usercontent.goog

Observed 2026-07-18T12:41:11.038881180+00:00 (42m ago). Every field below was attested with an Ed25519 signature at scan time.

Responding, no home page
Runs onGoogle
Secured byGoogle Trust Services
Registered withMarkMonitor Inc.
IPv6 · tranco_1k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat usercontent.goog actually stands on - every host below is a signed observation
usercontent.goog
A / AAAA
142.251.16.1322607:f8b0:4004:c29::84
Googleserves the site
NS
ns2.google.comns1.google.comns3.google.comns4.google.com
google.comanswers its DNS
TLS
*.googleusercontent.com
Google Trust Servicesissued its certificate

DNS Records

A 1

  • 142.251.16.132

AAAA 1

  • 2607:f8b0:4004:c29::84

TXT 2

  • v=spf1 -all
  • v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com

NS 4

  • ns2.google.com
  • ns1.google.com
  • ns3.google.com
  • ns4.google.com

SOA 1

  • ns1.google.com dns-admin.google.com

CAA 1

  • issue "pki.goog"

TLS Certificates (3)

Common NameIssuerExpires
*.googleusercontent.com C=US, O=Google Trust Services, CN=WR2 Mon, 21 Sep 2026 08:39:12 +0000
WR2 C=US, O=Google Trust Services LLC, CN=GTS Root R1 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R1 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for usercontent.goog. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for usercontent.goog <a href="https://domaindrift.io/t/usercontent.goog"> <img src="https://domaindrift.io/badge/usercontent.goog.svg" width="300" height="64" alt="DomainDrift signed observations for usercontent.goog"> </a>

Ed25519 Receipt

Receipt ID
5c008c76-d897-47f4-935f-a7f7ef620bee
Output Hash
9915c2d46a073d68140573a414ea7b186c963f4d9f883f0b3918fa89c6399196
Signature
ed25519:daac5562cd2872bf93b8a0fbbc2191b7df89d5082b5326b95381a5ae3131a83e354682f81fc336d1b73704f49eb5ca677502cba9528a8b282f33aa2152055a04
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser