CONTINUOUS INTERNET TELEMETRY24H DRIFT4,955 material changesacross 4,518 domains · last 24h · -5,460 vs yesterdayDNS DRIFT284 domains changed DNS providertop destination cloudflare.com · -375 vs yesterdayEMAIL DRIFT62 domains switched email providertop destination google.com · -105 vs yesterdayCERT DRIFT89 domains switched issuing CA24h · -130 vs yesterday

skywater.io

Observed Jul 24, 2026, 03:30 UTC (10h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Responding, no home page
Runs onAmazon
Secured byAmazon
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat skywater.io actually stands on - every host below is a signed observation
skywater.io
A / AAAA
13.226.238.4113.226.238.2413.226.238.10413.226.238.74
Amazonserves the site
NS
ns-1484.awsdns-57.orgns-1713.awsdns-22.co.ukns-485.awsdns-60.comns-839.awsdns-40.net
awsdns-57.org + awsdns-22.co.uk + moreanswers its DNS
TLS
skywater.io
Amazonissued its certificate

DNS Records

A 4

  • 13.226.238.41
  • 13.226.238.24
  • 13.226.238.104
  • 13.226.238.74

NS 4

  • ns-1484.awsdns-57.org
  • ns-1713.awsdns-22.co.uk
  • ns-485.awsdns-60.com
  • ns-839.awsdns-40.net

SOA 1

  • ns-839.awsdns-40.net awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common NameIssuerExpires
skywater.io C=US, O=Amazon, CN=Amazon RSA 2048 M01 Tue, 27 Oct 2026 23:59:59 +0000
Amazon RSA 2048 M01 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:21:28 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for skywater.io. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for skywater.io <a href="https://domaindrift.io/t/skywater.io"> <img src="https://domaindrift.io/badge/skywater.io.svg" width="300" height="64" alt="DomainDrift signed observations for skywater.io"> </a>

Ed25519 Receipt

Receipt ID
rcpt_24c69408f3ffdeb0
Output Hash
c7e39ddcc7317da8815d10f39f634341a85004bbe4be055437fa50ec6a114159
Signature
ed25519:4e363de47cb12961f792d0a521e4355b65c78e4888d08e765996e2cad2fc1cf8c0b437d8b102b577eb1be685354604db55c2b70ca8d2a8e45301a82dc094ec06
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser