CONTINUOUS INTERNET TELEMETRY24H DRIFT3,002 material changesacross 2,653 domains · -396 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination cloudflare.com · -3 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,312 curated domains not answering-6,406 vs yesterdayERRORS10,955 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,002 material changesacross 2,653 domains · -396 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination cloudflare.com · -3 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,312 curated domains not answering-6,406 vs yesterdayERRORS10,955 responded with an errorlast probe · 5xx / 404 / 429 / 403

windows.com

Observed 2026-07-12T20:04:05.668Z (15h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Registered withMarkMonitor Inc.
Also usesGoogle Search ConsoleFacebook/Meta
IPv6 · 6 subdomains · tranco_1k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat windows.com actually stands on - every host below is a signed observation
windows.com
A / AAAA
20.76.201.17120.112.250.13320.231.239.24620.236.44.162+6 more
Cloudflareserves the site
NS
ns4-205.azure-dns.infons3-205.azure-dns.orgns2-205.azure-dns.netns1-205.azure-dns.com
azure-dns.info + azure-dns.org + moreanswers its DNS
MX
mail.windows.com
windows.comreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://windows.microsoft.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time555 ms
DNS resolutionNOERROR
Redirect chain
https://windows.microsoft.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 5

  • 20.76.201.171
  • 20.112.250.133
  • 20.231.239.246
  • 20.236.44.162
  • 20.70.246.20

AAAA 5

  • 2603:1020:201:10::10f
  • 2603:1030:b:3::152
  • 2603:1030:c02:8::14
  • 2603:1030:20e:3::23c
  • 2603:1010:3:3::5b

MX 1

  • 10mail.windows.com

TXT 5

  • google-site-verification=ioCM5aKUAjBy9Z8Or81O6eQagwr_unGdyGJ0V8II7QM
  • D-TRUST=27XN9J9VBV6S24F
  • v=spf1 mx -all
  • facebook-domain-verification=d65hkhpulntsek90x3rt1cqq4y06tk
  • v=DMARC1; p=reject; pct=100; rua=mailto:rua@dmarc.microsoft; ruf=mailto:ruf@dmarc.microsoft; fo=1

NS 4

  • ns4-205.azure-dns.info
  • ns3-205.azure-dns.org
  • ns2-205.azure-dns.net
  • ns1-205.azure-dns.com

SOA 1

  • ns1-205.azure-dns.com azuredns-hostmaster.microsoft.com

CAA 1

  • contactemail caarecordaware@microsoft.com

TLS Certificates (0)

None.

Subdomains (6)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for windows.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for windows.com <a href="https://domaindrift.io/t/windows.com"> <img src="https://domaindrift.io/badge/windows.com.svg" width="300" height="64" alt="DomainDrift signed observations for windows.com"> </a>

Ed25519 Receipt

Receipt ID
23923a64-80ea-4ba0-9738-ed4c42226bb2
Output Hash
d132f3149e68152549af0e22665dedbb96fd3444123b8024f3078e51f91abef2
Signature
ed25519:f14892668af4edd3a11af4c6e90b1b388bccfd7966ad694315ce9e84c721ed033049cb17542bb427763d9ac7e9075ee9003157e95169055a2dfdc81d215c2807
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser