CONTINUOUS INTERNET TELEMETRY24H DRIFT2,098 material changesacross 1,895 domains · -453 vs yesterdayDNS DRIFT12 domains changed DNS providertop destination afternic.com · -4 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,392 curated domains not answeringlast probe, steadyERRORS10,896 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,098 material changesacross 1,895 domains · -453 vs yesterdayDNS DRIFT12 domains changed DNS providertop destination afternic.com · -4 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,392 curated domains not answeringlast probe, steadyERRORS10,896 responded with an errorlast probe · 5xx / 404 / 429 / 403

llbean.com

Observed 2026-07-14T10:53:52.991Z (2h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Registered withMarkMonitor Inc.
Also usesDocuSignDocker
8 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat llbean.com actually stands on - every host below is a signed observation
llbean.com
A / AAAA
23.47.200.230
Cloudflareserves the site
NS
a11-67.akam.neta1-95.akam.neta28-65.akam.neta10-66.akam.net+1 more
akam.netanswers its DNS
MX
llbean-com.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.llbean.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time193 ms
DNS resolutionNOERROR
Redirect chain
https://www.llbean.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 23.47.200.230

MX 1

  • 0llbean-com.mail.protection.outlook.com

TXT 18

  • xwzcdvh9xxsksfx1ghj8v7cp27drvwz1
  • docusign=3ad89a08-60be-44f1-98c3-29f28e0e6902
  • jamf-site-verification=W_vDVd1Pvr1BD96Uf0L3wA
  • v=spf1 include:spftext.egain.cloud include:spf.protection.outlook.com ip4:66.128.144.88/29 ip4:103.2.140.0/22 ip4:103.36.108.0/22 ip4:103.47.204.0/22 ip4:43.228.184.0/22 ip4:216.22.15.224/27 ip4:207.58.147.64/28 ip4:207.58.142.208/29 ip4:198.2.177.0/24 ip4:198.2.178.0/24 ip4:198.2.179.0/24 ip4:198.2.180.0/24 ip4:205.201.139.0/24 ip4:205.201.136.0/23 ip4:205.201.134.128/25 ip4:205.201.131.128/25 ip4:198.2.186.0/23 ip4:66.165.105.241/29 ip4:66.165.105.248 ip4:216.151.52.100 ip4:208.50.138.11 ip4:64.211.226.48 ip4:162.247.216.0/22 ip4:139.60.152.0/22 ip4:54.186.193.102/32 ip4:52.222.73.120/32 ip4:52.222.73.83/32 ip4:52.222.62.51/32 ip4:52.222.75.85/32 ip4:198.2.128.0/24 ip4:198.2.132.0/22 ip4:198.2.136.0/23 include:_spf.atoracle.com a:production.shop.llbean.demandware.net include:spf.mandrillapp.com a:production.na04.llbean.demandware.net a:staging.na04.llbean.demandware.net include:mailgun.org include:everbridge.net ~all
  • anthropic-domain-verification-pg1yr0=Zyw3ymdYl5z1kuUKNbLBkajli
  • yOf55tAOREkgwRiZ3seNxUt1YzdER95AVp+1MCkmTzxpBBoUKUfx4JaT+94KbEDMn8K4kQuAtq1547gAiqRWiA==
  • apple-domain-verification=zyrF4qyNCD2rys1K
  • adobe-idp-site-verification=59c6780a870cea8740134f86361e720a377f4d7a134dcb0cf8f20cfd00003934
  • QgSwHVIxg8WqGHH6rlIatd7Ou7zFcLVEGpGSbP6MUvo=
  • _lwi27xcjth9ww0fwk5xhn74udxctnxg

NS 5

  • a11-67.akam.net
  • a1-95.akam.net
  • a28-65.akam.net
  • a10-66.akam.net
  • a5-66.akam.net

SOA 1

  • a1-95.akam.net domainadmin.llbean.com

TLS Certificates (0)

None.

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for llbean.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for llbean.com <a href="https://domaindrift.io/t/llbean.com"> <img src="https://domaindrift.io/badge/llbean.com.svg" width="300" height="64" alt="DomainDrift signed observations for llbean.com"> </a>

Ed25519 Receipt

Receipt ID
78bb5ab0-0ff4-468b-ae11-da9e776c504a
Output Hash
71fa6203317ac45849dbf27fbaad2b4845f11403bdb7c44993063fac355e8772
Signature
ed25519:5685936c85c08068518bf753be66e7e6bb37e54b82583dd1b4d45eb60891802c57cb74b0d134da89232cf24b9520c2b8e48a5bd7ad161b12db6ca405ec29030f
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser