CONTINUOUS INTERNET TELEMETRY24H DRIFT10,475 material changesacross 10,085 domains · last 24h · -154 vs yesterdayDNS DRIFT662 domains changed DNS providertop destination cloudflare.com · -118 vs yesterdayEMAIL DRIFT177 domains switched email providertop destination google.com · +7 vs yesterdayCERT DRIFT229 domains switched issuing CA24h · -1 vs yesterdayNOW704 curated domains not reachable-645 vs yesterdaySITE ERRORS18,096 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED96,683 throttled or blocked our scanner429 rate-limit / 403 bot-block

mailbox.org

Observed Jul 22, 2026, 00:12 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onHeinlein-Support
Secured byDigiCert
Also usesGoogle Search Console
IPv6 · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat mailbox.org actually stands on - every host below is a signed observation
mailbox.org
A / AAAA
185.97.174.352001:67c:2050:b100:1:443:0:184
Heinlein-Supportserves the site
NS
ns.jpberlin.dens2.jpberlin.dens3.jpberlin.dedns3.cloudns.net+1 more
jpberlin.de + cloudns.netanswers its DNS
MX
mx1.mailbox.orgmx2.mailbox.orgmx3.mailbox.orgmx4.mailbox.org+1 more
mailbox.orgreceives its email
TLS
*.mailbox.org
DigiCert Incissued its certificate

DNS Records

A 1

  • 185.97.174.35

AAAA 1

  • 2001:67c:2050:b100:1:443:0:184

MX 5

  • 10mx1.mailbox.org
  • 10mx2.mailbox.org
  • 10mx3.mailbox.org
  • 10mx4.mailbox.org
  • 50mx-n.mailbox.org

TXT 9

  • mailru-verification: 0c2c482975b1fc2f
  • swisssign-check=1tuXIQOBa4NZh2EIQI5nFD8fbJW2EvxB6W8rYhAoQ5
  • have-i-been-pwned-verification=aa98600469e4f52f5b4c8e6952a0927d
  • google-site-verification=bCdtsEmyfsVIfzBgWZpEvCf3TeJgpw0f6x5miXGwakY
  • google-site-verification=ojrG-cXIWNDWMmRomplDCsZknBUmg2PO32SffP1Xy2E
  • v=spf1 ip4:213.203.238.0/25 ip4:195.10.208.0/24 ip4:91.198.250.0/24 ip4:80.241.56.0/21 ip6:2001:67c:2050::/48 mx ~all
  • v=DMARC1; p=reject; adkim=r; aspf=r; pct=100; rua=mailto:abuse+arf@heinlein-support.de; rf=afrf; fo=1;
  • mmdxtly5wtl64qpt6hn4jgpfsr1hl0np
  • v=STSv1;id=20261606010000

NS 5

  • ns.jpberlin.de
  • ns2.jpberlin.de
  • ns3.jpberlin.de
  • dns3.cloudns.net
  • dns4.cloudns.net

SOA 1

  • ns.jpberlin.de root.jpberlin.de

SRV 3

  • xmpp.mailbox.org:5222 p0
  • xmpp.mailbox.org:5269 p0
  • auto.mailbox.org:443 p0

CAA 5

  • iodef "mailto:mail@heinlein-support.de"
  • iodef "mailto:security@heinlein-support.de"
  • issue "digicert.com"
  • issue "letsencrypt.org"
  • issue "swisssign.com"

TLS Certificates (2)

Common NameIssuerExpires
*.mailbox.org C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=Thawte TLS RSA CA G1 Wed, 02 Dec 2026 23:59:59 +0000
Thawte TLS RSA CA G1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Tue, 02 Nov 2027 12:24:25 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mailbox.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for mailbox.org <a href="https://domaindrift.io/t/mailbox.org"> <img src="https://domaindrift.io/badge/mailbox.org.svg" width="300" height="64" alt="DomainDrift signed observations for mailbox.org"> </a>

Ed25519 Receipt

Receipt ID
rcpt_e34abcc8df8574d8
Output Hash
d762b8cbf68954348c5a7570110ca2d796e736b8f684c01bd7c1d5931b04236c
Signature
ed25519:f2e3e4e54cc09b93a04fd2524a69d819e942727b5e5ffce009d4ecbafd844641b846cce8bd9209cc9b3724b47124037c57b47d7fa5772bf9a39772eb2770070c
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser