CONTINUOUS INTERNET TELEMETRY24H DRIFT6,914 material changesacross 6,500 domains · last 24h · -3,501 vs yesterdayDNS DRIFT433 domains changed DNS providertop destination cloudflare.com · -226 vs yesterdayEMAIL DRIFT103 domains switched email providertop destination google.com · -64 vs yesterdayCERT DRIFT143 domains switched issuing CA24h · -76 vs yesterdayNOW464 curated domains not reachable-239 vs yesterdaySITE ERRORS17,364 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,703 sites429 rate-limit / 403 bot-block, a posture signal

zimbra.com

Observed Jul 24, 2026, 03:03 UTC (5h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onFastly
Email byMimecast
Secured byLet's Encrypt
Registered withCSC Corporate Domains, Inc.
Also usesHubSpot
IPv6 · 1 subdomain · tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat zimbra.com actually stands on - every host below is a signed observation
zimbra.com
A / AAAA
23.185.0.22620:12a:8000::22620:12a:8001::2
Fastlyserves the site
NS
dns1.p05.nsone.netdns2.p05.nsone.netdns3.p05.nsone.netdns4.p05.nsone.net
nsone.netanswers its DNS
MX
us-smtp-inbound-1.mimecast.comus-smtp-inbound-2.mimecast.com
Mimecastreceives its email
TLS
zimbra.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 23.185.0.2

AAAA 2

  • 2620:12a:8000::2
  • 2620:12a:8001::2

MX 2

  • 10us-smtp-inbound-1.mimecast.com
  • 10us-smtp-inbound-2.mimecast.com

TXT 3

  • v=spf1 ptr mx ip4:52.7.157.95 ip4:52.70.125.224 ip4:52.204.246.185 ip4:52.205.85.65 ip4:66.64.15.66 ip4:167.89.32.168 ip4:173.227.76.247 ip4:14.141.104.38 ip4:193.122.206.174 ip4:193.122.199.60 ip4:129.213.200.110 ip4:150.136.98.232 ip4:150.136.146.2 ip4:129.80.213.239 ip4:193.122.157.30 ip4:141.148.3.168 ip4:129.213.104.172 ip4:193.122.141.196/32 ip4:150.136.208.81/32 include:us._netblocks.mimecast.com include:_spf.salesforce.com include:212115.spf01.hubspotemail.net include:4366039.spf01.hubspotemail.net -all
  • cisco-ci-domain-verification=681f562fa07c58c993c8bfde487542cb70b5b5eef7753e423d2ff666ce4f33b5linkedin-site-verification=ae9a3118-fc72-40a5-9e5a-246a2fda8ebc0ed1fe018af82aa0df68164d5ebf2117796408d42c
  • v=DMARC1;p=reject;rua=mailto:dmarc@zimbra.com;ruf=mailto:dmarc@zimbra.com;aspf=s;sp=none

NS 4

  • dns1.p05.nsone.net
  • dns2.p05.nsone.net
  • dns3.p05.nsone.net
  • dns4.p05.nsone.net

SOA 1

  • dns1.p05.nsone.net hostmaster.nsone.net

SRV 1

  • mail.zimbra.com:443 p0

CAA 3

  • issue "digicert.com"
  • issue "letsencrypt.org"
  • issue "pki.goog; cansignhttpexchanges=yes"

TLS Certificates (2)

Common NameIssuerExpires
zimbra.com C=US, O=Let's Encrypt, CN=R13 Sun, 23 Aug 2026 05:01:19 +0000
R13 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Fri, 12 Mar 2027 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for zimbra.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for zimbra.com <a href="https://domaindrift.io/t/zimbra.com"> <img src="https://domaindrift.io/badge/zimbra.com.svg" width="300" height="64" alt="DomainDrift signed observations for zimbra.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_57ade9d680c72bb0
Output Hash
045edd42e84f462bc188566c8473b29097ddebcae7f643cd0dfd946aa47ae431
Signature
ed25519:dd33b53e2401d6efc46d898d0b0fb7207feced65c72f911e9869f5a73910e2d6da72bf0ce0831f341e33dde3bac2411db9b880ed86050ac94be5591b5288050c
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser