CONTINUOUS INTERNET TELEMETRY24H DRIFT10,182 material changesacross 9,753 domains · -447 vs yesterdayDNS DRIFT662 domains changed DNS providertop destination parity.domains · -118 vs yesterdayEMAIL DRIFT194 domains switched email providertop destination outlook.com · +24 vs yesterdayCERT DRIFT237 domains switched issuing CA24h · +7 vs yesterdayNOW693 curated domains not reachable-656 vs yesterdaySITE ERRORS17,934 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED96,166 throttled or blocked our scanner429 rate-limit / 403 bot-block

adguard.com

Observed Jul 22, 2026, 12:25 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Also usesGoogle Search Console
IPv6 · 12 subdomains · cybersecurity_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat adguard.com actually stands on - every host below is a signed observation
adguard.com
A / AAAA
104.18.189.9104.18.188.92606:4700::6812:bc092606:4700::6812:bd09
Cloudflareserves the site
NS
todd.ns.cloudflare.comkim.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
aspmx.l.google.comalt2.aspmx.l.google.comalt1.aspmx.l.google.comalt3.aspmx.l.google.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 302 → /en/welcome.html
HTTP status302
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time182 ms
DNS resolutionNOERROR
Redirect chain
/en/welcome.html

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 104.18.189.9
  • 104.18.188.9

AAAA 2

  • 2606:4700::6812:bc09
  • 2606:4700::6812:bd09

MX 5

  • 1aspmx.l.google.com
  • 5alt2.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com

TXT 10

  • yandex-verification: 7d5bcb562342d95d
  • google-site-verification=C-XEsvNSLIkZ_ZOpSJlzl_z1_cQFFc-arjN7L1TlMGo
  • v=spf1 include:_spf.elasticemail.com include:amazonses.com include:mail.zendesk.com include:_spf.google.com ~all
  • google-site-verification=-8CXeWfTQR6WvZd1Raodw8ep5hbSymulJpV8N9RFS5E
  • google-site-verification=6cTHlf1GauPiNc5e4mNpSrHaaTwMG4l2IQ3h1EKB13w
  • google-site-verification=y7rH7W2dkiNHL-bSs0XUKRW1xEcqLNrxkLWNyfxiTiI
  • apple-domain-verification=AqQKfly7OVFP70Md
  • google-site-verification=S95UXPmK7Xueylf8rfShpm59xzGyGBBLhrY3JG9pBkQ
  • v=DMARC1; p=reject; rua=mailto:rua@adguard.com;
  • v=DKIM1; (detected)

NS 2

  • todd.ns.cloudflare.com
  • kim.ns.cloudflare.com

SOA 1

  • kim.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (12)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for adguard.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for adguard.com <a href="https://domaindrift.io/t/adguard.com"> <img src="https://domaindrift.io/badge/adguard.com.svg" width="300" height="64" alt="DomainDrift signed observations for adguard.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_6acc0b20e9ad82b5
Output Hash
da99927e493a999bc1276f998f9dc3672a0ab2b0e04b7bbdcb919c69858d2762
Signature
ed25519:3ec2630c0a0acf573364f68b25942b72c0cb2abddca82f1b31990ac5ba61ab197b47474e8da188777ca59517ab72fe243747b43cdbef45865c4e4dbfabf17700
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser