CONTINUOUS INTERNET TELEMETRY24H DRIFT2,991 material changesacross 2,644 domains · -407 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination cloudflare.com · -3 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination h-email.net · -4 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,956 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,991 material changesacross 2,644 domains · -407 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination cloudflare.com · -3 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination h-email.net · -4 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,956 responded with an errorlast probe · 5xx / 404 / 429 / 403

hotdocs.com

Observed 2026-07-12T19:01:30.835Z (16h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle (SPF sender)
Registered withGoDaddy.com, LLC
Also usesAtlassianHubSpot
legal_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat hotdocs.com actually stands on - every host below is a signed observation
hotdocs.com
A / AAAA
141.193.213.20141.193.213.21
Cloudflareserves the site
NS
ns3-01.azure-dns.orgns4-01.azure-dns.infons1-01.azure-dns.comns2-01.azure-dns.net
azure-dns.org + azure-dns.info + moreanswers its DNS
MX
mx1.hc4996-64.iphmx.commx2.hc4996-64.iphmx.com
Google (SPF sender)receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://mitratech.com/products/hotdocs/
HTTP status301
Servercloudflare
TLS protocolHTTP/3
TLS issuernot observed
Behind Cloudflareyes
Response time184 ms
DNS resolutionNOERROR
Redirect chain
https://mitratech.com/products/hotdocs/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 141.193.213.20
  • 141.193.213.21

MX 2

  • 5mx1.hc4996-64.iphmx.com
  • 5mx2.hc4996-64.iphmx.com

TXT 6

  • ltg3lel0099h9a17bmpqm21vop
  • atlassian-domain-verification=fMRikxpa8XkztU5y0mj3kQdPLn3aT/nbZlqga6QkJfbIPJdc4Ak69aJQt9AD6oY1
  • atlassian-domain-verification=e2ywp+/W1MxQUyXQzzgrT0zYgCGQ28hMluFas1Yu7eNv3OBha6I6ZqFhiD6GsB5Y
  • v=spf1 ip4:139.138.57.228/32 ip4:68.232.145.169/32 ip4:97.75.189.70 ip4:217.144.148.114 ip4:184.172.43.26 include:spf.protection.outlook.com include:auth.msgapp.com include:5861831.spf02.hubspotemail.net include:_spf.google.com ~all
  • MS=ms15118938
  • v=DMARC1; p=quarantine; rua=mailto:dmarc@mitratech.com; fo=1

NS 4

  • ns3-01.azure-dns.org
  • ns4-01.azure-dns.info
  • ns1-01.azure-dns.com
  • ns2-01.azure-dns.net

SOA 1

  • ns1-01.azure-dns.com azuredns-hostmaster.microsoft.com

SRV 1

  • sipdir.online.lync.com:1 p100

TLS Certificates (0)

None.

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for hotdocs.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for hotdocs.com <a href="https://domaindrift.io/t/hotdocs.com"> <img src="https://domaindrift.io/badge/hotdocs.com.svg" width="300" height="64" alt="DomainDrift signed observations for hotdocs.com"> </a>

Ed25519 Receipt

Receipt ID
38138f0d-1e6d-4851-9a26-e89702873809
Output Hash
e83f9fa39ecb6adebca95d44949ee89c5e43cd3d8205f90fa2098983566eaac0
Signature
ed25519:57210e2df116dfa0fea180059d40b2df0d1f6fd77ff67553ed8c0f7fbc06f301c27b30f146fb2aecc32f3eb83c3a1c4c3053d6c841dd809512ada588d61c2109
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser