CONTINUOUS INTERNET TELEMETRY24H DRIFT1,430 material changesacross 1,233 domains · +976 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination parity.domains · +17 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW531 curated domains not answering-1,684 vs yesterdayERRORS2,830 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,960 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,430 material changesacross 1,233 domains · +976 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination parity.domains · +17 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW531 curated domains not answering-1,684 vs yesterdayERRORS2,830 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,960 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

ytimg.com

Observed 2026-07-17T12:55:35.913903740+00:00 (10h ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Email byGoogle Workspace
Registered withMarkMonitor Inc.
tranco_1k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ytimg.com actually stands on - every host below is a signed observation
ytimg.com
NS
ns4.google.comns3.google.comns1.google.comns2.google.com
google.comanswers its DNS
MX
smtp.google.com
Google Workspacereceives its email

DNS Records

MX 1

  • 0smtp.google.com

TXT 2

  • v=spf1 -all
  • v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com

NS 4

  • ns4.google.com
  • ns3.google.com
  • ns1.google.com
  • ns2.google.com

SOA 1

  • ns1.google.com dns-admin.google.com

CAA 1

  • issue "pki.goog"

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ytimg.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ytimg.com <a href="https://domaindrift.io/t/ytimg.com"> <img src="https://domaindrift.io/badge/ytimg.com.svg" width="300" height="64" alt="DomainDrift signed observations for ytimg.com"> </a>

Ed25519 Receipt

Receipt ID
5726f4e3-508e-47b3-993f-7bb8e5e9f480
Output Hash
6fe6fd8776aef90cf9c51a028fc71a11960ad21c726a3231a08c70275804f48f
Signature
ed25519:4e695946941b910394c71e229463486353d09c68d88ed403b583960d342e2270124ba24f2292f9811f04de09271f93de6b425f6d226a003d985cd902d3f5380c
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser