expensify.com

Observed 2026-07-14T03:35:25.326Z (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle (SPF sender)

Registered withDomain.com - Network Solutions, LLC

Also usesDocuSignGoogle Search ConsoleAtlassianHubSpotStripeDocker

92 subdomains · push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat expensify.com actually stands on - every host below is a signed observation

expensify.com

A / AAAA

104.17.242.118104.17.243.118

Cloudflareserves the site

newt.ns.cloudflare.comelinore.ns.cloudflare.com

cloudflare.comanswers its DNS

mail1.prod.sjc.exfy.iomail1.prod.rno.exfy.iomail1.prod.lax.exfy.io

Google (SPF sender)receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.expensify.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time61 ms

DNS resolutionNOERROR

Redirect chain

https://www.expensify.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

104.17.242.118
104.17.243.118

MX 3

10mail1.prod.sjc.exfy.io
10mail1.prod.rno.exfy.io
10mail1.prod.lax.exfy.io

TXT 24

docusign=ba395f5c-ba0c-4aa6-8aea-a51a87b926bf
hcp-domain-verification=b25a30f4d0d272d74500af05d95453d9f3deb512a0c1208b9ebd071eccf6558a
google-site-verification=mwjk5rKbVkv3dvdth34OMS8NUNPasa-q6S3CgNPEB5A
openai-domain-verification=dv-I8ubuvE6jugg1Q7xWFiNa7S5
cloudflare_dashboard_sso=80e6a76219ec72834e43d729f71d971f
cursor-domain-verification-vftet7=zt27s8xVoWwATlVpGw8YqAUEB
status-page-domain-verification=77s5wpm9xlvn
anthropic-domain-verification-5x6966=iooy01N0biy5JjFmPksmRuADy
atlassian-domain-verification=zwoncadguzNUy4jbGaa/i/7sXz6N3pkOpJ1VfjaWaJ7naAHqba3e6uezPgea0wcY
v=spf1 ip4:162.0.152.65 ip4:162.0.153.65 ip4:162.0.154.65 ip4:143.55.230.205 ip4:143.55.230.232 ip4:143.55.230.96 ip4:161.38.199.231 ip4:216.221.168.219 ip4:216.221.168.220/31 ip4:216.221.168.222 include:amazonses.com include:_spf.google.com include:46862285.spf03.hubspotemail.net -all

NS 2

newt.ns.cloudflare.com
elinore.ns.cloudflare.com

SOA 1

elinore.ns.cloudflare.com dns.cloudflare.com

CAA 14

issuewild comodoca.com
issuewild ssl.com
iodef mailto:infra+caa@expensify.com
issue comodoca.com
issue amazon.com
issuewild digicert.com; cansignhttpexchanges=yes
issue letsencrypt.org
issue www.digicert.com
issue sectigo.com
issue ssl.com

TLS Certificates (0)

None.

Subdomains (92)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for expensify.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/expensify.com">
  <img src="https://domaindrift.io/badge/expensify.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for expensify.com">
</a>

Ed25519 Receipt

Receipt ID: 8ce750b6-11bf-4dcb-9e87-1e9d44c92474
Output Hash: 52c0dd3c058dbc4b8fe60087b8a9fe5ab2456b84a4e7d58f03a1142af47613d3
Signature: ed25519:b96c3cff311f49056e26b92ba24ff20c2372897e0936884f7e4bd56e27e8de0c576b1a9dfd59d945e541b82d874b32c9a14c4374f2cf48674738ceb30f5f120a
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/expensify.com