CONTINUOUS INTERNET TELEMETRY24H DRIFT165 material changesacross 120 domains · +19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,523 curated domains not answering+189 vs yesterdayERRORS29,900 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,355 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT165 material changesacross 120 domains · +19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,523 curated domains not answering+189 vs yesterdayERRORS29,900 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,355 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

growthbook.io

Observed Jul 18, 2026, 12:46 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Secured byAmazon
Also usesGoogle Search ConsoleStripeHubSpot
tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat growthbook.io actually stands on - every host below is a signed observation
growthbook.io
A / AAAA
13.226.238.8213.226.238.6813.226.238.7513.226.238.52
Cloudflareserves the site
NS
ns-1335.awsdns-38.orgns-176.awsdns-22.comns-1834.awsdns-37.co.ukns-876.awsdns-45.net
awsdns-38.org + awsdns-22.com + moreanswers its DNS
MX
aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comhejjtgeaxm7klwyevnmqzoy5ptpclxlrk5ya4ym7b4hxlujdjoxq.mx-verification.google.com+2 more
Google Workspacereceives its email
TLS
growthbook.io
Amazonissued its certificate

DNS Records

A 4

  • 13.226.238.82
  • 13.226.238.68
  • 13.226.238.75
  • 13.226.238.52

MX 6

  • 1aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com
  • 15hejjtgeaxm7klwyevnmqzoy5ptpclxlrk5ya4ym7b4hxlujdjoxq.mx-verification.google.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 8

  • MS=ms63174900
  • OSSRH-77439
  • ca3-ab6f5f79d8054cd7ba6b094dd672d433
  • google-site-verification=4aAUYSkVSKkSQh-VS_o6uCgYz9c0nZTtEXzsWhVLCxQ
  • google-site-verification=Varnbn-_N00hrJRiOzrDcZwo_38xosL-3lNKcqjO_PM
  • stripe-verification=1a9b071bc35200679af1d32d9ae317cb1b8b61b403a3ce684936c870e370c6f7
  • v=spf1 include:_spf.google.com include:sendgrid.net include:8863617.spf04.hubspotemail.net -all
  • v=DMARC1; p=none;

NS 4

  • ns-1335.awsdns-38.org
  • ns-176.awsdns-22.com
  • ns-1834.awsdns-37.co.uk
  • ns-876.awsdns-45.net

SOA 1

  • ns-1834.awsdns-37.co.uk awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common NameIssuerExpires
growthbook.io C=US, O=Amazon, CN=Amazon RSA 2048 M04 Wed, 30 Dec 2026 23:59:59 +0000
Amazon RSA 2048 M04 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:26:35 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for growthbook.io. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for growthbook.io <a href="https://domaindrift.io/t/growthbook.io"> <img src="https://domaindrift.io/badge/growthbook.io.svg" width="300" height="64" alt="DomainDrift signed observations for growthbook.io"> </a>

Ed25519 Receipt

Receipt ID
4a481504-ae13-480a-a2aa-7fab3f5558d6
Output Hash
8540c87d70e00a8d9e5532d7eaa3f77d2fb4a8c9d70f0f182d00199f3b3058d3
Signature
ed25519:9da13b4760509369df4b2356cd0664748406473ef35ba9dd1ca6b4dd323dd9a2ec7e0f865c0568088d9f3f3248f1c6f692566b5baef12255f68e6f8cd80f1409
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser