CONTINUOUS INTERNET TELEMETRY24H DRIFT1,930 material changesacross 1,735 domains · +508 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination cloudflare.com · -20 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -4 vs yesterdayNOW1,328 curated domains not answering+618 vs yesterdayERRORS5,798 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,663 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,930 material changesacross 1,735 domains · +508 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination cloudflare.com · -20 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -4 vs yesterdayNOW1,328 curated domains not answering+618 vs yesterdayERRORS5,798 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,663 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

overleaf.com

Observed 2026-07-18T06:23:56.902Z (5h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Registered withCloudflare, Inc.
Also usesGoogle Search ConsoleAtlassianStripeMiro
7 subdomains · tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat overleaf.com actually stands on - every host below is a signed observation
overleaf.com
A / AAAA
34.120.52.64
Cloudflareserves the site
NS
tori.ns.cloudflare.combob.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
alt3.aspmx.l.google.comalt2.aspmx.l.google.comalt1.aspmx.l.google.comaspmx.l.google.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 308 → https://www.overleaf.com/
HTTP status308
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time144 ms
DNS resolutionNOERROR
Redirect chain
https://www.overleaf.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 34.120.52.64

MX 5

  • 10alt3.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 1aspmx.l.google.com
  • 10alt4.aspmx.l.google.com

TXT 16

  • google-site-verification=-X9hApZ1uqsr49ba4PBLg33y2s19VcADbb7lDHGqB5g
  • v=spf1 include:_spf.google.com include:u794683.wl184.sendgrid.net include:servers.mcsv.net ~all
  • coda-verification=0da304a2-6c79-4208-83ea-8f51bfc94b13
  • atlassian-domain-verification=vujOqKgTa3qfzkMqa3sYB93w6sf0XaNYcystg60SWUA7CmiVHw6q/7L0RP5NMfi3
  • stripe-verification=5f271c389cd0644ec65428d90dbb18e77b37881ccf1bb634fd880e412476d524
  • sending_domain533712=8746e74c9b6a667fadb708e588bf898e1880f524c64ea54e89d9356f7162eb0b
  • google-site-verification=D0AlvSn7piou5FNy77ZNlSi3QR__xCAydRXk3NAbcpY
  • pardot533712=987e1e0db8966e19cb7d54963b0e6042b2873309903471336cf0ef5e0aa09d5b
  • access-domain-verification=0daf88c5fafcadd440874e7c51f081c7b2657272a54b2cbe645fed65eafc4b35
  • miro-verification=95335fdc096c06730131722de6a1b5615a5d9e78

NS 2

  • tori.ns.cloudflare.com
  • bob.ns.cloudflare.com

SOA 1

  • bob.ns.cloudflare.com dns.cloudflare.com

CAA 11

  • issuewild comodoca.com
  • issue comodoca.com
  • issuewild digicert.com; cansignhttpexchanges=yes
  • issue digicert.com; cansignhttpexchanges=yes
  • issuewild ssl.com
  • issuewild letsencrypt.org
  • issue pki.goog; cansignhttpexchanges=yes
  • issue ssl.com
  • issue amazon.com
  • issuewild pki.goog; cansignhttpexchanges=yes

TLS Certificates (0)

None.

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for overleaf.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for overleaf.com <a href="https://domaindrift.io/t/overleaf.com"> <img src="https://domaindrift.io/badge/overleaf.com.svg" width="300" height="64" alt="DomainDrift signed observations for overleaf.com"> </a>

Ed25519 Receipt

Receipt ID
172ad19d-820e-44d0-9bb2-96c2b63edcdb
Output Hash
7d2f3dc258beefcf82b091d6cc681303ed99bb46ef99517d5f4689c599c94090
Signature
ed25519:ae67c37983d64f12271abce2bc4ec7446d1aa369d204d4cc830c6f49c06425b89a7ec236fedf544afcdb2dc61608681a007f2f6ca64d5f4ebe599b52e8af5205
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser