CONTINUOUS INTERNET TELEMETRY24H DRIFT40,693 material changesacross 38,400 domains · 24h to ~80m ago · -167 vs yesterdayNOW555 curated domains not reachablelast probe, steadySITE ERRORS34,561 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 156,826 sites429 rate-limit / 403 bot-block, a posture signal

userlist.com

Observed Jul 24, 2026, 20:32 UTC (8d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Up right now
Email byGoogle Workspace
Secured byLet's Encrypt
Also uses1PasswordFacebook/MetaGoogle Search Console
IPv6 · 2 subdomains · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat userlist.com actually stands on - every host below is a signed observation
userlist.com
A / AAAA
18.208.88.15798.84.224.1112600:1f18:16e:df01::2582600:1f18:16e:df01::259
2600serves the site
NS
ns1.dnsimple-edge.comns2.dnsimple-edge.netns3.dnsimple-edge.ions4.dnsimple-edge.org
dnsimple-edge.com + dnsimple-edge.net + moreanswers its DNS
MX
aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
userlist.com
Let's Encryptissued its certificate

DNS Records

A 2

  • 18.208.88.157
  • 98.84.224.111

AAAA 2

  • 2600:1f18:16e:df01::258
  • 2600:1f18:16e:df01::259

MX 5

  • 1aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com

TXT 12

  • 1password-site-verification=NLGOEGCVFBFP7JBB7OQP5QQQQ4
  • facebook-domain-verification=qqncem6petqzgfbpks7luxsy3malwa
  • v=spf1 include:userlistmail.com include:_spf.google.com ~all
  • anthropic-domain-verification-00e6s0=zIoq7eFhawkooRbnKzxQYQPZF
  • yahoo-verification-key=hxhfUYNfei4kqVQs4HYeUK8QoMTAaO2RFj/CT5Bq6cQ=
  • google-site-verification=6aqmMHYbXZrAt9Gv6RmuwaghU5UDn0Qgu_b0QFc5xsY
  • google-site-verification=KLT76UFl1iU-GL2rNYBi-D0Hw6YP9Y0bG3BxaL6uoNw
  • google-site-verification=Ns5EcZ6i7NyDcKmTFR5xctm1C9VRp3W5X0z5q35E9QQ
  • ahrefs-site-verification_94d1eb12099827b4c8d3a316ff6168ba866ab0f8d4b7fe7e4306e62f7b549dc2
  • ahrefs-site-verification_c02fe7b1db3bdb1efa362547beabfd568aae2659447b28e1947f2cc575b777a5

NS 4

  • ns1.dnsimple-edge.com
  • ns2.dnsimple-edge.net
  • ns3.dnsimple-edge.io
  • ns4.dnsimple-edge.org

SOA 1

  • ns1.dnsimple-edge.com admin.dnsimple.com

TLS Certificates (4)

Common NameIssuerExpires
userlist.com C=US, O=Let's Encrypt, CN=YE1 Sat, 29 Aug 2026 10:14:10 +0000
YE1 C=US, O=ISRG, CN=Root YE Sat, 02 Sep 2028 23:59:59 +0000
Root YE C=US, O=Internet Security Research Group, CN=ISRG Root X2 Thu, 02 Sep 2032 23:59:59 +0000
ISRG Root X2 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for userlist.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for userlist.com <a href="https://domaindrift.io/t/userlist.com"> <img src="https://domaindrift.io/badge/userlist.com.svg" width="300" height="64" alt="DomainDrift signed observations for userlist.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_c2bd1b92a4ced298
Output Hash
f2cec2ac778ccbe95c58b6af903f9de4e8c8f176a38b5436d6a00694b875d20c
Signature
ed25519:15854a7a75754a77492de833d2800a6ca181d0563fed91b72b3ae2252a1cff1d19d81edb168e84042d9f55b5d3db1e6a96365f319394b8ccba149f8f7a5a500a
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser