CONTINUOUS INTERNET TELEMETRY24H DRIFT2,088 material changesacross 1,891 domains · +666 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination cloudflare.com · -19 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination google.com · -2 vs yesterdayCERT DRIFT9 domains switched issuing CA24h · +9 vs yesterdayNOW1,137 curated domains not answering+427 vs yesterdayERRORS5,448 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,042 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,088 material changesacross 1,891 domains · +666 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination cloudflare.com · -19 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination google.com · -2 vs yesterdayCERT DRIFT9 domains switched issuing CA24h · +9 vs yesterdayNOW1,137 curated domains not answering+427 vs yesterdayERRORS5,448 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,042 throttled or blocked our scanner429 rate-limit / 403 bot-block

savills.com

Observed 2026-07-18T12:07:28.753418349+00:00 (11m ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall
Runs onAmazon
Email byMimecast
Secured byAmazon
Registered withSafeNames Ltd.
Also usesFacebook/MetaGoogle Search Console
IPv6 · real_estate_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat savills.com actually stands on - every host below is a signed observation
savills.com
A / AAAA
108.138.217.14108.138.217.28108.138.217.8108.138.217.87+8 more
Amazonserves the site
NS
dns3.safenames.orgdns1.safenames.comdns2.safenames.net
safenames.org + safenames.com + moreanswers its DNS
MX
eu-smtp-inbound-2.mimecast.comeu-smtp-inbound-1.mimecast.com
Mimecastreceives its email
TLS
savills-studley.com
Amazonissued its certificate

DNS Records

A 4

  • 108.138.217.14
  • 108.138.217.28
  • 108.138.217.8
  • 108.138.217.87

AAAA 8

  • 2600:9000:2487:3200:19:de4f:95c0:93a1
  • 2600:9000:2487:a600:19:de4f:95c0:93a1
  • 2600:9000:2487:4e00:19:de4f:95c0:93a1
  • 2600:9000:2487:de00:19:de4f:95c0:93a1
  • 2600:9000:2487:8a00:19:de4f:95c0:93a1
  • 2600:9000:2487:8800:19:de4f:95c0:93a1
  • 2600:9000:2487:ee00:19:de4f:95c0:93a1
  • 2600:9000:2487:7400:19:de4f:95c0:93a1

MX 2

  • 10eu-smtp-inbound-2.mimecast.com
  • 10eu-smtp-inbound-1.mimecast.com

TXT 52

  • apple-domain-verification=Xm0izKEAB_5tbaMHZ-UzmvFE9zNemXAKIIP8kG-JYC4
  • _jw8w65tbqzzfshc9a9cj2lbvd355jy0
  • bjrbktpgl1kcjgx012wr4m8ml0cg4w9s
  • d4d2qxrfhs1kgskwgcwc01klxkt3zxyz
  • google-gws-recovery-domain-verification=48002184
  • facebook-domain-verification=6bmd4p6e9rx7cw9aqf2rtcwie9r4oe
  • 23044e4d640bf6270b42b21214c19ed0
  • nh6dtskpkkc1mhln6fbrrc2mskqnhrwk
  • _6erwc5fv3sxj16t624biegohlppji0s
  • v=spf1 include:eu._netblocks.mimecast.com include:cust-spf.exacttarget.com include:spf.protection.outlook.com include:asp-spf1.yardi.com include:asp-spf2.yardi.com include:v139.vx-email.com ip4:212.9.193.64 ip4:204.93.80.116 ip4:204.93.80.117 ip4:204.93.95.57 ip4:52.60.55.163 ip4:166.78.68.26 ip4:192.254.125.237 ip4:185.13.246.162 ip4:52.210.116.254 ip4:18.203.71.63 ip4:63.32.205.62 ip4:213.219.55.0/27 ip4:213.52.141.128/27 ip4:37.46.3.168/29 ip4:62.216.225.64/27 ip4:167.89.111.144 ip4:149.72.190.126 ip4:167.89.19.59 ip4:103.151.192.0/23 ip4:185.12.80.0/22 ip4:188.172.128.0/20 ip4:192.161.144.0/20 ip4:216.198.0.0/18 include:_spf.apimo.pro include:docebosaas.com -all

NS 3

  • dns3.safenames.org
  • dns1.safenames.com
  • dns2.safenames.net

SOA 1

  • dns1.safenames.com hostmaster.safenames.net

TLS Certificates (3)

Common NameIssuerExpires
savills-studley.com C=US, O=Amazon, CN=Amazon RSA 2048 M01 Wed, 28 Oct 2026 23:59:59 +0000
Amazon RSA 2048 M01 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:21:28 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for savills.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for savills.com <a href="https://domaindrift.io/t/savills.com"> <img src="https://domaindrift.io/badge/savills.com.svg" width="300" height="64" alt="DomainDrift signed observations for savills.com"> </a>

Ed25519 Receipt

Receipt ID
4cec9cd1-0303-4b62-a5f8-58b223263e59
Output Hash
f29e160512a5863e2a0d0c62b44c4c9cbd0e0696de55d1cafb4062b1887d56c2
Signature
ed25519:b7bd16827f1dd4f31c0e62299db2a5d17661fbfb924aa41aa3921b9fd30eceac5f757d6b84b1245eaa6e89525db507dfcbf7652764605d41168dec5cdee66500
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser