CONTINUOUS INTERNET TELEMETRY24H DRIFT1,647 material changesacross 1,146 domains · last 24h · +840 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT2 domains switched email providertop destination hostmetro.comCERT DRIFT3 domains switched issuing CA24hNOW468 curated domains not reachable+46 vs yesterdaySITE ERRORS17,671 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 101,611 sites429 rate-limit / 403 bot-block, a posture signal

webflow.com

Observed Jul 24, 2026, 17:41 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Secured byAmazon
Registered withMarkMonitor Inc.
Also usesAtlassianDockerDocuSignFacebook/MetaGoogle Search ConsoleHubSpotLinearMiro
cms
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat webflow.com actually stands on - every host below is a signed observation
webflow.com
A / AAAA
32.192.133.18354.172.49.8552.4.23.27
Cloudflareserves the site
NS
ns-1078.awsdns-06.orgns-1722.awsdns-23.co.ukns-344.awsdns-43.comns-958.awsdns-55.net
awsdns-06.org + awsdns-23.co.uk + moreanswers its DNS
MX
aspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
*.us-east-1-prod-red.kube.webflow.services
Amazonissued its certificate

DNS Records

A 3

  • 32.192.133.183
  • 54.172.49.85
  • 52.4.23.27

MX 5

  • 1aspmx.l.google.com
  • 10aspmx2.googlemail.com
  • 10aspmx3.googlemail.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 37

  • a--ZbWEx22eC1OzXyIYkzUHxyCa30U4
  • apple-domain-verification=JyJNP680tZLN6J8E
  • asv=8c460543decb140b87537caf58b0eed9
  • atlassian-domain-verification=vyA0bNKYZHNbZ9LbbOu8Aa28WajPCCJ53qO9/idxMUDkdOdta9hrFrutCiOK000q
  • atlassian-sending-domain-verification=b3059a1a-7d62-4ed9-8cb7-19a228943ed2
  • disclosebot-verify=95407f417726b3da0fe488f145ce21014bfd49fc
  • docker-verification=f6eb7150-2c4d-42e3-a1d5-a71ed7b41947
  • docusign=8205d05f-50c2-4f88-b454-f5ced0363215
  • drift-domain-verification=bec89e0da98bf36f6e5c3d99bddaf800d78f7c6a697112bd1a16160ca0f28ef3
  • dropbox-domain-verification=hhwd9eo2aak2

NS 4

  • ns-1078.awsdns-06.org
  • ns-1722.awsdns-23.co.uk
  • ns-344.awsdns-43.com
  • ns-958.awsdns-55.net

SOA 1

  • ns-1078.awsdns-06.org awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common NameIssuerExpires
*.us-east-1-prod-red.kube.webflow.services C=US, O=Amazon, CN=Amazon RSA 2048 M01 Wed, 21 Oct 2026 23:59:59 +0000
Amazon RSA 2048 M01 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:21:28 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for webflow.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for webflow.com <a href="https://domaindrift.io/t/webflow.com"> <img src="https://domaindrift.io/badge/webflow.com.svg" width="300" height="64" alt="DomainDrift signed observations for webflow.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_97cac21018c30bdd
Output Hash
98ea90ae89665607935c44faec1a31d8d5676d7c76cbbf4522347279e71d9252
Signature
ed25519:09cac367a76de91b13ebceee5ffa26fb834f14a46feea11d400dd3b5e2594cee1662044d0a084ca8b7390c20a090c5308b21b52bdb11e2aab7a5ff64d695fc09
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser