CONTINUOUS INTERNET TELEMETRY24H DRIFT1,398 material changesacross 1,173 domains · +944 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination pphosted.com · +5 vs yesterdayNOW337 curated domains not answering-1,878 vs yesterdayERRORS2,358 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,280 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,398 material changesacross 1,173 domains · +944 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination pphosted.com · +5 vs yesterdayNOW337 curated domains not answering-1,878 vs yesterdayERRORS2,358 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,280 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

level.io

Observed 2026-07-17T14:34:53.824571958+00:00 (5h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMailgun
Secured byGoogle Trust Services
Also usesGoogle Search ConsoleStripe
tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat level.io actually stands on - every host below is a signed observation
level.io
A / AAAA
198.202.211.1
Cloudflareserves the site
NS
byron.ns.cloudflare.comperla.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
1.reply.zone2.reply.zone
Mailgunreceives its email
TLS
level.io
Google Trust Servicesissued its certificate

DNS Records

A 1

  • 198.202.211.1

MX 2

  • 101.reply.zone
  • 202.reply.zone

TXT 7

  • MS=ms27290349
  • openai-domain-verification=dv-kU2ibzCxpnLYXluryXBzmHvk
  • anthropic-domain-verification-brhm4d=o1ShEpY20RiYemcUz3dyBV7Kd
  • google-site-verification=5-YSh4vzIEd7cFDQYOntjeIqbnIGOb0wnUFF0hMUpSo
  • stripe-verification=a9875655ad61749c7bd73a9ee7f5a8f61ca19986b5d711147f184b6f4a151ca9
  • v=spf1 mx ip4:198.190.255.0/24 ip4:65.254.222.160/27 include:spf.protection.outlook.com include:mailgun.org -all
  • v=DMARC1; p=reject; rua=mailto:89b8c0567e094f169f2bbe019d09704c@dmarc-reports.cloudflare.net; ruf=mailto:89b8c0567e094f169f2bbe019d09704c@dmarc-reports.cloudflare.net;

NS 2

  • byron.ns.cloudflare.com
  • perla.ns.cloudflare.com

SOA 1

  • byron.ns.cloudflare.com dns.cloudflare.com

CAA 10

  • issue "comodoca.com"
  • issue "digicert.com; cansignhttpexchanges=yes"
  • issue "letsencrypt.org"
  • issue "pki.goog; cansignhttpexchanges=yes"
  • issue "ssl.com"
  • issuewild "comodoca.com"
  • issuewild "digicert.com; cansignhttpexchanges=yes"
  • issuewild "letsencrypt.org"
  • issuewild "pki.goog; cansignhttpexchanges=yes"
  • issuewild "ssl.com"

TLS Certificates (3)

Common NameIssuerExpires
level.io C=US, O=Google Trust Services, CN=WE1 Thu, 15 Oct 2026 00:15:23 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for level.io. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for level.io <a href="https://domaindrift.io/t/level.io"> <img src="https://domaindrift.io/badge/level.io.svg" width="300" height="64" alt="DomainDrift signed observations for level.io"> </a>

Ed25519 Receipt

Receipt ID
9d10aba7-738f-4aa6-a129-84e12be7fd6a
Output Hash
3ac00921316052dd179a54fe090700b92292cf0a160d17ddb573afb7ff069fee
Signature
ed25519:fba6541cc867e1b437635e9c5887a6f7914e84a4bfd743e4e300f51804a79ef12925a7bdee4da9b93218ba4d3d444aee4a266458ac26c67695fab77cdb36440f
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser