draw.io

Observed 2026-07-13T12:27:08.737Z (17h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Also usesAtlassianGoogle Search Console

IPv6 · 6 subdomains · tranco_40k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat draw.io actually stands on - every host below is a signed observation

draw.io

A / AAAA

104.18.9.17104.18.8.172606:4700::6812:9112606:4700::6812:811

Cloudflareserves the site

amy.ns.cloudflare.comphil.ns.cloudflare.com

cloudflare.comanswers its DNS

in2-smtp.messagingengine.comin1-smtp.messagingengine.com

messagingengine.comreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://app.diagrams.net/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time4 ms

DNS resolutionNOERROR

Redirect chain

https://app.diagrams.net/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

104.18.9.17
104.18.8.17

AAAA 2

2606:4700::6812:911
2606:4700::6812:811

MX 2

20in2-smtp.messagingengine.com
10in1-smtp.messagingengine.com

TXT 8

atlassian-sending-domain-verification=690dc5a9-b6a7-447f-b408-16d89ce49e28
ppkey-2d1fb5b97e7c58ada54dfadbd35fa494
atlassian-domain-verification=mJPBs8/rq5Aa39OBRHSqJkQSPuOZprSHw72SVNF6dQ5G155gTNaM6ZsFaNmYvp9G
tfn9p1fu886js93r7q2368k0m2
google-site-verification=erkJ4yoY6B96JnFJ3b1LzW28Ed3eGXmI6aMM6eH-V_g
v=spf1 include:spf.messagingengine.com include:_spf.atlassian.net -all
v=DMARC1; p=quarantine; rua=mailto:85a00aad9797492ca54650a3d8f2db34@dmarc-reports.cloudflare.net; ruf=mailto:postmaster@draw.io; pct=100; sp=quarantine
v=DNSSEC1; (detected)

NS 2

amy.ns.cloudflare.com
phil.ns.cloudflare.com

SOA 1

amy.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (6)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for draw.io. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/draw.io">
  <img src="https://domaindrift.io/badge/draw.io.svg"
       width="300" height="64" alt="DomainDrift signed observations for draw.io">
</a>

Ed25519 Receipt

Receipt ID: d56f9246-1ac0-409f-9ba1-262c8ef5a8a5
Output Hash: 5089689229f012153dd440295a67f81ceb6f8f7ee3dcfe81fd435ccf58205dfd
Signature: ed25519:81a3a8aba2f686f24e409cadaa80052a0781bda342d3a3b96cf59209372ee897fd9eca7ab4552fbb7e7f2f83ded3c3eb2aefa60a40ce1e2c9faf8dbaefb8550e
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/draw.io