CONTINUOUS INTERNET TELEMETRY24H DRIFT211 material changesacross 138 domains · +65 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,584 curated domains not answering+250 vs yesterdayERRORS30,059 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,362 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT211 material changesacross 138 domains · +65 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,584 curated domains not answering+250 vs yesterdayERRORS30,059 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,362 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

hide.me

Observed Jul 18, 2026, 13:45 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onOVH SAS
Email byAmazon SES
Secured byDigiCert
Also usesGoogle Search ConsoleFacebook/Meta
1 subdomain · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat hide.me actually stands on - every host below is a signed observation
hide.me
A / AAAA
174.138.52.82
OVH SASserves the site
NS
ns1.hide.mens2.hide.mens0.hide.mens4.hide.me+1 more
hide.meanswers its DNS
MX
mail.onemail.me
Amazon SESreceives its email
TLS
hide.me
DigiCert Incissued its certificate

DNS Records

A 1

  • 174.138.52.82

MX 1

  • 5mail.onemail.me

TXT 12

  • google-site-verification=lvXQzUs_VS32sakfsk18afxAr5GtaoAqXUIl32F4onY
  • google-site-verification=jlFCAzeB_dKpW9OLbf0L_90G28AJaCh0TRPW-mHtfik
  • google-site-verification=_inzsgen0wp7q9uA_E7csgRWOij122Wp6Qpf1dGvBy0
  • google-site-verification=TqAYX_wCieP24rylHii5aG8vd81GnwL_TnevDg4v31g
  • facebook-domain-verification=emfg2skz1lhstuu9hxe40xttv0ku4u
  • yandex-verification: 74d90618b62a55e0
  • _0t1cgegndgv2phsz39m8ukdu8gi7dec
  • ahrefs-site-verification_b417611967a753480a57a86562e4a9449f578c1e492250b2c98e5a0f4c187915
  • v=spf1 include:amazonses.com include:support.zendesk.com include:mailgun.org ip4:46.166.151.132 ip6:2a00:1768:2001:7d:0:0:0:84 ~all
  • v=DMARC1; p=quarantine;

NS 5

  • ns1.hide.me
  • ns2.hide.me
  • ns0.hide.me
  • ns4.hide.me
  • ns3.hide.me

SOA 1

  • ns0.hide.me support.hide.me

CAA 4

  • issue "digicert.com"
  • issue "letsencrypt.org"
  • issuewild "digicert.com"
  • iodef "mailto:security@hide.me"

TLS Certificates (2)

Common NameIssuerExpires
hide.me C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1 Sat, 10 Oct 2026 23:59:59 +0000
DigiCert Global G3 TLS ECC SHA384 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G3 Sun, 13 Apr 2031 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for hide.me. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for hide.me <a href="https://domaindrift.io/t/hide.me"> <img src="https://domaindrift.io/badge/hide.me.svg" width="300" height="64" alt="DomainDrift signed observations for hide.me"> </a>

Ed25519 Receipt

Receipt ID
944665cf-0038-441a-90ac-020646071559
Output Hash
517d5b476e0789164ea770ea49a543cd6202182d05e5d8a74f18fccff4de51e2
Signature
ed25519:ee878bf6dc458039387ce8cae8572854a8b273dea39b732eb5f9f9bca67b841afc8e977c950d70d0d72055159ef5fefc07bf1d05c6c100be15b23b34bf0f6a04
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser