CONTINUOUS INTERNET TELEMETRY24H DRIFT8,114 material changesacross 7,708 domains · last 24h · -2,301 vs yesterdayDNS DRIFT494 domains changed DNS providertop destination cloudflare.com · -165 vs yesterdayEMAIL DRIFT122 domains switched email providertop destination google.com · -45 vs yesterdayCERT DRIFT161 domains switched issuing CA24h · -58 vs yesterdayNOW483 curated domains not reachable-220 vs yesterdaySITE ERRORS17,393 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,839 sites429 rate-limit / 403 bot-block, a posture signal

courier.com

Observed Jul 21, 2026, 19:38 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Secured byLet's Encrypt
Registered withAmazon Registrar, Inc.
Also usesZoomGoogle Search ConsoleStripe
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat courier.com actually stands on - every host below is a signed observation
courier.com
A / AAAA
76.76.21.21
Cloudflareserves the site
NS
ns-1038.awsdns-01.orgns-1982.awsdns-55.co.ukns-441.awsdns-55.comns-548.awsdns-04.net
awsdns-01.org + awsdns-55.co.uk + moreanswers its DNS
MX
aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
courier.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 76.76.21.21

MX 5

  • 1aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 12

  • ZOOM_verify_2DHilZPBSnCdDGbYf8Zqfg
  • apple-domain-verification=8qNLcffGhRWhFO94
  • google-site-verification=7b2K2owln05NW1dkXtHOmAtrASSfZAJ8kI0LQUNu5ks
  • google-site-verification=Y-j2Wi_5JQHIOABYrU2lPcYNll-XuymSv7_-EiSKx2Y
  • google-site-verification=ZF0_st2b0Cyhg_bKiTjGp6iYCAZI5TzJmkRuBJP2R6g
  • google-site-verification=g4CG6hv0onhw1QiwPLaY3h7oBnfWENUNiWdUm28pqF0
  • https://issues.sonatype.org/browse/OSSRH-64486
  • postman-domain-verification=efbb264fa3bff263d8c4f7cb0b752fa2d94422007f34d20304732e346c0417bbd73cc98470892840746f2a99385bc7681579e9575dd2254ffe66a9469fa24cb8
  • segment-site-verification=ieTuLEPaJXR6Id3hvo1izTU5TKIzu96d
  • stripe-verification=a8a5634a93cb68faf80478238e81cbf138d9c99eb714c87399d457ae7a5a8b4d

NS 4

  • ns-1038.awsdns-01.org
  • ns-1982.awsdns-55.co.uk
  • ns-441.awsdns-55.com
  • ns-548.awsdns-04.net

SOA 1

  • ns-1982.awsdns-55.co.uk awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common NameIssuerExpires
courier.com C=US, O=Let's Encrypt, CN=YR2 Sat, 03 Oct 2026 10:15:15 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for courier.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for courier.com <a href="https://domaindrift.io/t/courier.com"> <img src="https://domaindrift.io/badge/courier.com.svg" width="300" height="64" alt="DomainDrift signed observations for courier.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_019992a7653e45ec
Output Hash
0642bad31055ee45da54f8e48d7d3c170493bedc8a493b7b310ef098c2bbc9aa
Signature
ed25519:aab8f4e58b92796c0f118e0e903119c948394ffb0eaaae19f476d3af9261ea3ac38b5810d6bf8e3cf8782310c04633203c7a189d03798bd43963c5ec0e966204
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser