CONTINUOUS INTERNET TELEMETRY24H DRIFT1,895 material changesacross 1,695 domains · -656 vs yesterdayDNS DRIFT13 domains changed DNS providertop destination cloudflare.com · -3 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,397 curated domains not answeringlast probe, steadyERRORS10,890 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT1,895 material changesacross 1,695 domains · -656 vs yesterdayDNS DRIFT13 domains changed DNS providertop destination cloudflare.com · -3 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,397 curated domains not answeringlast probe, steadyERRORS10,890 responded with an errorlast probe · 5xx / 404 / 429 / 403

aa.com

Observed 2026-07-13T20:39:45.106Z (14h ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall
Runs onCloudflare
Email byMicrosoft 365
Registered withCSC Corporate Domains, Inc.
Also usesGoogle Search ConsoleAtlassian
19 subdomains · fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat aa.com actually stands on - every host below is a signed observation
aa.com
A / AAAA
23.36.20.140
Cloudflareserves the site
NS
eur5.akam.netns1-118.akam.netasia2.akam.netns1-149.akam.net+4 more
akam.netanswers its DNS
MX
aa-com.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

bot_blocked Blocked our probe (WAF / bot protection) 403 blocked by cloudflare - bot protection active
HTTP status403
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time41 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 23.36.20.140

MX 1

  • 5aa-com.mail.protection.outlook.com

TXT 36

  • ms-domain-verification=7882b656-bb77-46a7-ace1-5e98991a8f60
  • lucidlink-verification=HETATCH0P2YF31VDDHX9EYHNFC
  • google-site-verification=TqCzk3YeRjQC3aV8ZnhzLZ_4PG3v2eLN7TCrZEoIRas
  • amazonses:WWgi/cimZNBMUTaL6vENIdRE+olrkfUVqq0nKtFUU3s=
  • mongodb-site-verification=FEXmQB6dWXMrdS1bmQEsBMRXfglMmuNr
  • r9416799dt2rlt0o47f0hja26a
  • smartsheet-site-validation=o5w--wmz-ypDcMIaYltIoc8rl9GVtLOz
  • hpe-greenlake-domain-verification=614a633359664e73746e4b396a554e584a6f6d49594145766b41717959335876
  • amazonses:HO/GT9BMm+jjDYSXpPnCsDJG/Apme4R8qI2Pd/rwpek=
  • mongodb-site-verification=rE3HOnngegvIjlv04r8bF57HhGEkKRP9

NS 8

  • eur5.akam.net
  • ns1-118.akam.net
  • asia2.akam.net
  • ns1-149.akam.net
  • asia3.akam.net
  • asia4.akam.net
  • usw2.akam.net
  • eur6.akam.net

SOA 1

  • asia3.akam.net hostmaster.akamai.com

TLS Certificates (0)

None.

Subdomains (19)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for aa.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for aa.com <a href="https://domaindrift.io/t/aa.com"> <img src="https://domaindrift.io/badge/aa.com.svg" width="300" height="64" alt="DomainDrift signed observations for aa.com"> </a>

Ed25519 Receipt

Receipt ID
e9c410e7-5da8-4aec-8ec8-aa3d2b622cba
Output Hash
4ab7abd55cf9dfddf293ad0ea222385f725f0674dfaaba83349e981583bd3305
Signature
ed25519:9f064a9d80be64a765f8aa8b6403d77435e36677b73d75dd2693a3e2946cc305f8933b93c9447a7ca18952ead812c8331eb5be014314693bef2d1599ba9f3e02
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser