CONTINUOUS INTERNET TELEMETRY24H DRIFT766 material changesacross 682 domains · +312 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination seizedservers.com · +12 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination pphosted.com · +2 vs yesterdayNOW2,526 curated domains not answering+311 vs yesterdayERRORS9,779 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,659 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT766 material changesacross 682 domains · +312 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination seizedservers.com · +12 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination pphosted.com · +2 vs yesterdayNOW2,526 curated domains not answering+311 vs yesterdayERRORS9,779 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,659 throttled or blocked our scanner429 rate-limit / 403 bot-block

embraer.com

Observed 2026-07-15T00:47:14.779Z (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesGoogle Search ConsoleFacebook/MetaFigmaDocuSignAtlassian
IPv6 · 9 subdomains · aerospace
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat embraer.com actually stands on - every host below is a signed observation
embraer.com
A / AAAA
104.18.23.216104.18.22.2162606:4700::6812:16d82606:4700::6812:17d8
Cloudflareserves the site
NS
elliot.ns.cloudflare.comdaniella.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
mxb-001b1f01.gslb.pphosted.commxa-001b1f01.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time264 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 104.18.23.216
  • 104.18.22.216

AAAA 2

  • 2606:4700::6812:16d8
  • 2606:4700::6812:17d8

MX 2

  • 0mxb-001b1f01.gslb.pphosted.com
  • 0mxa-001b1f01.gslb.pphosted.com

TXT 23

  • ms95524612
  • onetrust-domain-verification=46a69ec3b76943e38b3ee239551cf31a
  • google-site-verification=PlmVsF3-85eKblrCL4AqZiKeJtbYqzaVlLQIKV9cMqg
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • smartsheet-site-validation=DgYMLIdCG4T3G0PZyya2NlwdSghiUrBh
  • dtm-domain-verification=RVwg0iXxBYDo90NEmZuUTWYH5tV_1wpr-utJ-eogFOU
  • google-site-verification=z0LCchDHxl3tB6Xxhl6pTif1YP6Gq-AgNnS_v7pMknk
  • q27982tdkddrkn3sm7p76ml61vtbkllg
  • _k34kc5882p1fduzoi3nnzkanjqbrm1u
  • adobe-idp-site-verification=4f24c9a16d6b834bddfc39f805eae2ed40f3666a9081832a7fe1ffc2eac16c82

NS 2

  • elliot.ns.cloudflare.com
  • daniella.ns.cloudflare.com

SOA 1

  • daniella.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (9)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for embraer.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for embraer.com <a href="https://domaindrift.io/t/embraer.com"> <img src="https://domaindrift.io/badge/embraer.com.svg" width="300" height="64" alt="DomainDrift signed observations for embraer.com"> </a>

Ed25519 Receipt

Receipt ID
d8fdcf74-7766-480c-977c-227b60dd7be8
Output Hash
aa5358d6a0a37a801324c92d98dd31021aae766a3dce4726b98714356d8912c8
Signature
ed25519:5f72273f75ed63161d84c2e61c010769ff40bde0601002b08a32337315675ac6599fdd97feac4f48acc8e65073e5901e874805889f270d07ce1f8281f8cb3f0e
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser