CONTINUOUS INTERNET TELEMETRY24H DRIFT237 material changesacross 152 domains · +91 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,711 curated domains not answering+377 vs yesterdayERRORS30,507 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,600 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brNo nameservers in the latest observation24H DRIFT237 material changesacross 152 domains · +91 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,711 curated domains not answering+377 vs yesterdayERRORS30,507 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,600 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brNo nameservers in the latest observation

payworks.ca

Observed Jul 19, 2026, 11:05 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesSlackAtlassianZoomGoogle Search Console
IPv6 · 10 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat payworks.ca actually stands on - every host below is a signed observation
payworks.ca
A / AAAA
150.171.109.1502603:1061:14:91::1
Cloudflareserves the site
NS
dns3.p01.nsone.netdns1.p01.nsone.netdns2.p01.nsone.netdns4.p01.nsone.net
nsone.netanswers its DNS
MX
mail3.payworks.camail4.payworks.ca
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.payworks.ca/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time64 ms
DNS resolutionNOERROR
Redirect chain
https://www.payworks.ca/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 150.171.109.150

AAAA 1

  • 2603:1061:14:91::1

MX 2

  • 10mail3.payworks.ca
  • 20mail4.payworks.ca

TXT 19

  • apple-domain-verification=Lm7ipMzQg81Je7GP
  • slack-domain-verification=tQaS972y6VwabUmeTxqsXQwilVLtSVASDaXlqZGw
  • anthropic-domain-verification-37dpea=haCXilg93R7LzQYKeLzgT34wc
  • atlassian-domain-verification=1DZqrLR6e87jaQ3I7nWCmTElWBJCP7JgxD8hqVE6nqT0eYjt4ug89crEPzGpeITQ
  • _f91zkw3lc212e9zgabxdjwsnt32o295
  • pendo-domain-verification=9ed9c52d-257a-4622-84c9-07b94cf1a50b
  • 00DHs000001QHMU=1TBOK000000006T
  • adobe-idp-site-verification=4d951c72f37c2eeb083b060e4ebfc668f507a700f5f474d2fae55f96af3ea391
  • logmein-verification-code=8d75d5f8-6dad-4405-924f-81a28740c55b
  • ZOOM_verify_kFHxsC5hIcRF59Dk2xI7V9

NS 4

  • dns3.p01.nsone.net
  • dns1.p01.nsone.net
  • dns2.p01.nsone.net
  • dns4.p01.nsone.net

SOA 1

  • dns1.p01.nsone.net hostmaster.payworks.ca

CAA 6

  • issue amazontrust.com
  • issue amazon.com
  • issue awstrust.com
  • issue geotrust.com
  • issue letsencrypt.org
  • issue amazonaws.com

TLS Certificates (0)

None.

Subdomains (10)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for payworks.ca. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for payworks.ca <a href="https://domaindrift.io/t/payworks.ca"> <img src="https://domaindrift.io/badge/payworks.ca.svg" width="300" height="64" alt="DomainDrift signed observations for payworks.ca"> </a>

Ed25519 Receipt

Receipt ID
e2604694-19fc-4d33-b06d-7b056b72d40c
Output Hash
8e55996dce9448c8bae0d32d4395ee1c071f9c24bde70a811dcfc7456c40d291
Signature
ed25519:e65a2cdebed67b7bcc256a8668b7bc948e463aaf75ffabbfbabcd8e89c49fbeb34ff3d9e2c56c32a0b8aaa881f667097bd9b058a0c4239bcab6002de40d5ff0e
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser