CONTINUOUS INTERNET TELEMETRY24H DRIFT2,245 material changesacross 2,043 domains · -306 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination cloudflare.com · -1 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,388 curated domains not answeringlast probe, steadyERRORS10,886 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,245 material changesacross 2,043 domains · -306 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination cloudflare.com · -1 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,388 curated domains not answeringlast probe, steadyERRORS10,886 responded with an errorlast probe · 5xx / 404 / 429 / 403

gmail.com

Observed 2026-07-13T20:44:40.285Z (11h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
IPv6 · 5 subdomains · tranco_1k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat gmail.com actually stands on - every host below is a signed observation
gmail.com
A / AAAA
142.251.218.1652607:f8b0:4005:80a::2005
Cloudflareserves the site
NS
ns4.google.comns2.google.comns3.google.comns1.google.com
google.comanswers its DNS
MX
alt1.gmail-smtp-in.l.google.comalt3.gmail-smtp-in.l.google.comgmail-smtp-in.l.google.comalt4.gmail-smtp-in.l.google.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://mail.google.com/mail/u/0/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time77 ms
DNS resolutionNOERROR
Redirect chain
https://mail.google.com/mail/u/0/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 142.251.218.165

AAAA 1

  • 2607:f8b0:4005:80a::2005

MX 5

  • 10alt1.gmail-smtp-in.l.google.com
  • 30alt3.gmail-smtp-in.l.google.com
  • 5gmail-smtp-in.l.google.com
  • 40alt4.gmail-smtp-in.l.google.com
  • 20alt2.gmail-smtp-in.l.google.com

TXT 6

  • globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=
  • yahoo-verification-key=dKYwfVbaxatmcXiXy6LDAxMRirqpOq5tj98iJv9qWVk=
  • v=spf1 redirect=_spf.google.com
  • yahoo-verification-key=+eZwIPSgRxkAUzDtqT8Qhk+j4A1JF6V/wtGoyGTkELY=
  • v=DMARC1; p=none; sp=quarantine; rua=mailto:mailauth-reports@google.com
  • v=STSv1; id=20190429T010101;

NS 4

  • ns4.google.com
  • ns2.google.com
  • ns3.google.com
  • ns1.google.com

SOA 1

  • ns1.google.com dns-admin.google.com

CAA 1

  • issue pki.goog

TLS Certificates (0)

None.

Subdomains (5)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for gmail.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for gmail.com <a href="https://domaindrift.io/t/gmail.com"> <img src="https://domaindrift.io/badge/gmail.com.svg" width="300" height="64" alt="DomainDrift signed observations for gmail.com"> </a>

Ed25519 Receipt

Receipt ID
41ef133a-ba6b-4dc3-a4b7-fbadc1e08079
Output Hash
b8f5eb8299beec9b4bba098ac88e21a98a4ca7abe6d68f737a3ed1b998b8b8d5
Signature
ed25519:ddeb1de313dd7e59377a1fd511256634867180d5a6fd91f008ae8fbd11d52c1d16bea9c9e7aba6e57cef2c28c0b37fc55621a6ace5e9041c552fe5eb5cc35001
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser