CONTINUOUS INTERNET TELEMETRY24H DRIFT2,960 material changesacross 2,609 domains · -438 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination cloudflare.com · -3 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination h-email.net · -4 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,956 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,960 material changesacross 2,609 domains · -438 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination cloudflare.com · -3 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination h-email.net · -4 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,956 responded with an errorlast probe · 5xx / 404 / 429 / 403

freeform.com

Observed 2026-07-12T18:55:06.620Z (16h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Registered withCSC Corporate Domains, Inc.
Also usesGoogle Search Console
17 subdomains · media_entertainment
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat freeform.com actually stands on - every host below is a signed observation
freeform.com
A / AAAA
13.226.251.2513.226.251.9013.226.251.213.226.251.20
Cloudflareserves the site
NS
ns109.twdcns.comns109.twdcns.orgns109.twdcns.co.ukns109.twdcns.net
twdcns.com + twdcns.org + moreanswers its DNS

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.freeform.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time220 ms
DNS resolutionNOERROR
Redirect chain
https://www.freeform.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 4

  • 13.226.251.25
  • 13.226.251.90
  • 13.226.251.2
  • 13.226.251.20

TXT 3

  • google-site-verification=bbmHiErRXQQrYXkf14Y6rWdCknLQsszT6oPCBwf-Y_k
  • v=spf1 include:woc.spf.go.com -all
  • nr4agt7jv1d6mq0ddin2qmld31

NS 4

  • ns109.twdcns.com
  • ns109.twdcns.org
  • ns109.twdcns.co.uk
  • ns109.twdcns.net

SOA 1

  • ns109.twdcns.org awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for freeform.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for freeform.com <a href="https://domaindrift.io/t/freeform.com"> <img src="https://domaindrift.io/badge/freeform.com.svg" width="300" height="64" alt="DomainDrift signed observations for freeform.com"> </a>

Ed25519 Receipt

Receipt ID
0595c16e-7d0a-44d3-ae8c-052ea0d2520c
Output Hash
94fab6a0c3ddb64d81bd32c18c8049fbe2e5ab4ee1d97623ddffc12a3c34a8e4
Signature
ed25519:53ad8512f6121a58d30decc2bb239e234d2e48d500e77d0d091301a26f794538fa78832162435bf30e2af91a8cc5dbcd69082049a57a5085704882baa0550506
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser