framer.app

Observed 2026-07-14T12:25:12.217Z (8h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle (SPF sender)

IPv6 · 96 subdomains · tranco_20k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat framer.app actually stands on - every host below is a signed observation

framer.app

A / AAAA

18.244.214.1018.244.214.8418.244.214.6218.244.214.101+8 more

Cloudflareserves the site

ns-2002.awsdns-58.co.ukns-51.awsdns-06.comns-1371.awsdns-43.orgns-625.awsdns-14.net

awsdns-58.co.uk + awsdns-06.com + moreanswers its DNS

HTTPS probe

redirect Redirecting (3xx) 307 → https://www.framer.com

HTTP status307

Servercloudflare

TLS protocolHTTP/3

TLS issuernot observed

Behind Cloudflareyes

Response time76 ms

DNS resolutionNOERROR

Redirect chain

https://www.framer.com

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 4

18.244.214.10
18.244.214.84
18.244.214.62
18.244.214.101

AAAA 8

2600:9000:25f0:f200:1a:2b29:d580:93a1
2600:9000:25f0:2c00:1a:2b29:d580:93a1
2600:9000:25f0:c00:1a:2b29:d580:93a1
2600:9000:25f0:2a00:1a:2b29:d580:93a1
2600:9000:25f0:c000:1a:2b29:d580:93a1
2600:9000:25f0:4400:1a:2b29:d580:93a1
2600:9000:25f0:ce00:1a:2b29:d580:93a1
2600:9000:25f0:cc00:1a:2b29:d580:93a1

TXT 1

v=spf1 include:_spf.google.com -all

NS 4

ns-2002.awsdns-58.co.uk
ns-51.awsdns-06.com
ns-1371.awsdns-43.org
ns-625.awsdns-14.net

SOA 1

ns-1371.awsdns-43.org awsdns-hostmaster.amazon.com

CAA 5

issue pki.goog
issue amazon.com
issue letsencrypt.org
issue sectigo.com
iodef mailto:security@framer.com

TLS Certificates (0)

None.

Subdomains (96)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for framer.app. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/framer.app">
  <img src="https://domaindrift.io/badge/framer.app.svg"
       width="300" height="64" alt="DomainDrift signed observations for framer.app">
</a>

Ed25519 Receipt

Receipt ID: 173beb10-2f7e-43d7-b65e-2e9e607742af
Output Hash: 0e645c480deada54eb6873541c25e3847a07954a23f2d54a439e8ba63a43ae9e
Signature: ed25519:596bb41964b5c193f4039a3b9c0ce4a46ce7adb5e5c28ae3c53f3184c865113816814f14ee930b1ff7724c6e0e22ca57abcb026ce3864023c651ba88c8ee800d
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/framer.app