CONTINUOUS INTERNET TELEMETRY24H DRIFT1,135 material changesacross 1,015 domains · +681 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW823 curated domains not answering-1,392 vs yesterdayERRORS3,502 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED4,392 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,135 material changesacross 1,015 domains · +681 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW823 curated domains not answering-1,392 vs yesterdayERRORS3,502 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED4,392 throttled or blocked our scanner429 rate-limit / 403 bot-block

phylum.io

Observed 2026-07-17T12:20:33.208796701+00:00 (2h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onAmazon
Email byProofpoint
Secured byAmazon
Also usesAtlassianGoogle Search ConsoleHubSpot
cybersecurity_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat phylum.io actually stands on - every host below is a signed observation
phylum.io
A / AAAA
3.170.19.783.170.19.333.170.19.403.170.19.68
Amazonserves the site
NS
ns-1242.awsdns-27.orgns-2004.awsdns-58.co.ukns-463.awsdns-57.comns-852.awsdns-42.net
awsdns-27.org + awsdns-58.co.uk + moreanswers its DNS
MX
mxa-00785b01.gslb.pphosted.commxb-00785b01.gslb.pphosted.com
Proofpointreceives its email
TLS
*.phylum.io
Amazonissued its certificate

DNS Records

A 4

  • 3.170.19.78
  • 3.170.19.33
  • 3.170.19.40
  • 3.170.19.68

MX 2

  • 0mxa-00785b01.gslb.pphosted.com
  • 1mxb-00785b01.gslb.pphosted.com

TXT 13

  • 0ed1fe018a162ee7d81768471ba6751f595e922754
  • 90DBC88CEB
  • MS=ms13477400
  • MS=ms19399935
  • atlassian-domain-verification=P2pQd74FcS5zntf2sLuytHJww2rpFzQSN4idUqwOTvPMlnDTMmGtY4PeziV36V1H
  • google-site-verification=0D7Z_7I1Bcw-lvkq6cOsjF58DRXMzp4bmyERv1rG8c0
  • google-site-verification=FjJ4Xe5SUyS-HgGm8FjTlrU78W7ovJu0pSdhLqOg2oM
  • google-site-verification=_z8Me8Kkc0Zk7xMiQ8GcOEopqeMo-fx8qQNA8R8Bmpk
  • google-site-verification=wMMluhd378SjdJlgn0u_j6ydbW7zFrhl6S7n6K6GJUs
  • google-site-verification=wUwaIb6VMmsCXVa8HgQ7fuiM4RWGIAAR3dTWD-3jbH8

NS 4

  • ns-1242.awsdns-27.org
  • ns-2004.awsdns-58.co.uk
  • ns-463.awsdns-57.com
  • ns-852.awsdns-42.net

SOA 1

  • ns-852.awsdns-42.net awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common NameIssuerExpires
*.phylum.io C=US, O=Amazon, CN=Amazon RSA 2048 M04 Tue, 29 Dec 2026 23:59:59 +0000
Amazon RSA 2048 M04 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:26:35 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for phylum.io. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for phylum.io <a href="https://domaindrift.io/t/phylum.io"> <img src="https://domaindrift.io/badge/phylum.io.svg" width="300" height="64" alt="DomainDrift signed observations for phylum.io"> </a>

Ed25519 Receipt

Receipt ID
08581d79-081f-4da5-9f96-ad3601eb7014
Output Hash
bab5ca1981dbbc75f230478e3212e817616adda315c4458dd4f8e7cd45bebbc4
Signature
ed25519:fbe7fb47aa749a8cbe6596084a91029e7dbd4c44aba358e1d5a7fe57b9541d4285c713a14292d5f4ca89a74e7ed8add44d607d5361555bbd3e124ec601536906
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser