CONTINUOUS INTERNET TELEMETRY24H DRIFT2,945 material changesacross 2,593 domains · -453 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination h-email.net · -4 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,956 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,945 material changesacross 2,593 domains · -453 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination h-email.net · -4 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,956 responded with an errorlast probe · 5xx / 404 / 429 / 403

mfs.com

Observed 2026-07-12T18:24:05.784Z (16h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesAtlassianFacebook/MetaZoomGoogle Search Console
fintech_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat mfs.com actually stands on - every host below is a signed observation
mfs.com
A / AAAA
8.20.184.104
Cloudflareserves the site
NS
sdns77.ultradns.orgsdns77.ultradns.comsdns77.ultradns.netsdns77.ultradns.biz
ultradns.org + ultradns.com + moreanswers its DNS
MX
mxa-0013d502.gslb.pphosted.commxb-0013d502.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 302 → https://www.mfs.com/
HTTP status302
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time363 ms
DNS resolutionNOERROR
Redirect chain
https://www.mfs.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 8.20.184.104

MX 2

  • 10mxa-0013d502.gslb.pphosted.com
  • 10mxb-0013d502.gslb.pphosted.com

TXT 21

  • vmware-cloud-verification-740a15d0-ef5f-418d-bdaa-a2e69ce4847d
  • sending_domain1127253=73bc3c26f873f1009dbf8ca6e62c19c82fa7a14cf31b3a9d4285c1aa19a1400e
  • yYeVwmiTLNEQBCX1k0iuaMVBM+THmB5yP+9QUhzTiBauij2kTI+hRnUhjUgIrK+PJmw4+WHENoCS6meyPR3zHQ==
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • atlassian-domain-verification=eagOLRzNe1Vr1Baayf8t7TL4Md/4tpqxsifX0JearHeG0eOlpnl60gcte7mZvfk7
  • facebook-domain-verification=zrtl4tk7vme7jy08s7iscqamtff7dx
  • QuoVadis=184cad6f-ca60-4794-a5ac-30f23418436e
  • pexip-ms-tenant-domain-verification=value1,08712c57-74a4-4ea1-a0cd-2a6b62e9309c
  • atlassian-sending-domain-verification=6eede396-d165-4bd8-b46f-5b52a634070f
  • openai-domain-verification=dv-YEsOha7Pmks8RK9mJZ6MQ8wH

NS 4

  • sdns77.ultradns.org
  • sdns77.ultradns.com
  • sdns77.ultradns.net
  • sdns77.ultradns.biz

SOA 1

  • sdns77.ultradns.com networkadmin.mfs.com

TLS Certificates (0)

None.

Subdomains (6)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mfs.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for mfs.com <a href="https://domaindrift.io/t/mfs.com"> <img src="https://domaindrift.io/badge/mfs.com.svg" width="300" height="64" alt="DomainDrift signed observations for mfs.com"> </a>

Ed25519 Receipt

Receipt ID
e78c52f2-308c-4a70-bd9c-bad93edd6282
Output Hash
c5f8e2c494b5c6f499ab5382cb3d00a9bd1a66c94a7c85e031ba765d8bc4238e
Signature
ed25519:9870df9f781d329a15bffb8d476a92be216d3fdb96d1631875f3552f054acb67183b1240d44e084dc96b991f1830b3075a051807d3d72ce3bdb02e002806bd0a
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser