CONTINUOUS INTERNET TELEMETRY24H DRIFT2,952 material changesacross 2,600 domains · -446 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination h-email.net · -4 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,956 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,952 material changesacross 2,600 domains · -446 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination h-email.net · -4 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,956 responded with an errorlast probe · 5xx / 404 / 429 / 403

revlon.com

Observed 2026-07-12T19:57:54.169Z (15h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Registered withMarkMonitor Inc.
Also usesDocuSignGoogle Search ConsoleFacebook/MetaAtlassian
fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat revlon.com actually stands on - every host below is a signed observation
revlon.com
A / AAAA
23.227.38.65
Cloudflareserves the site
NS
edns3.ultradns.netedns3.ultradns.bizedns3.ultradns.comedns3.ultradns.org
ultradns.net + ultradns.biz + moreanswers its DNS
MX
revlon-com.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.revlon.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/3
TLS issuernot observed
Behind Cloudflareyes
Response time905 ms
DNS resolutionNOERROR
Redirect chain
https://www.revlon.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 23.227.38.65

MX 1

  • 10revlon-com.mail.protection.outlook.com

TXT 26

  • shopify-verification-code=HVFen7WaP0sIbqJRmesZrOsBqOgVxu
  • _76dsvt6njviezf4xg6l7esa5bx1jwn7
  • 0ODfI000001COnQ=1TBPW00000002D7
  • klaviyo-site-verification=Yn8yxY
  • klaviyo-site-verification=SQCsBD
  • docusign=1ffa1d14-3814-4ceb-a868-f463908ba22a
  • parkable-domain-verification=jIzkCXhz5Iz72BBXyqR3YfaCa2ShVVqu7-fmHOPO9t8=
  • google-site-verification=D8PUVVlQFrCM_Yv5j8SAL1soTzD8LrtHNZMftSgBxqs
  • nintex.60a8eb77712cd90070a39040
  • 1rttv2r92wkdsswbf0bld91tlg3fzhjs

NS 4

  • edns3.ultradns.net
  • edns3.ultradns.biz
  • edns3.ultradns.com
  • edns3.ultradns.org

SOA 1

  • edns3.ultradns.com domains.revlon.com

CAA 7

  • issue amazontrust.com
  • issue letsencrypt.org
  • issue geotrust.com
  • issue awstrust.com
  • issue amazonaws.com
  • issue sectigo.com
  • issue amazon.com

TLS Certificates (0)

None.

Subdomains (5)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for revlon.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for revlon.com <a href="https://domaindrift.io/t/revlon.com"> <img src="https://domaindrift.io/badge/revlon.com.svg" width="300" height="64" alt="DomainDrift signed observations for revlon.com"> </a>

Ed25519 Receipt

Receipt ID
7829723b-d548-46fe-a723-ca493e0f4754
Output Hash
080aad5035e3462e756763c77e40da225013f8c20782b6763f3fc43b23f58c12
Signature
ed25519:acbdf231ba7de228fbd97ff84712f61e1e7ea4a6acda69ec42c43634314acaa89cb43c157e5c34a8fbe9db2940083e18e4b5497859e598ed77023850bb557207
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser