CONTINUOUS INTERNET TELEMETRY24H DRIFT3,030 material changesacross 2,719 domains · -368 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination cloudflare.com · -3 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,953 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,030 material changesacross 2,719 domains · -368 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination cloudflare.com · -3 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,311 curated domains not answering-6,407 vs yesterdayERRORS10,953 responded with an errorlast probe · 5xx / 404 / 429 / 403

werner.com

Observed 2026-07-13T00:21:29.787959374+00:00 (13h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email bySalesforce
Secured byGoogle Trust Services
Also usesDockerGoogle Search ConsoleAtlassian
IPv6 · logistics_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat werner.com actually stands on - every host below is a signed observation
werner.com
A / AAAA
104.18.24.177104.18.25.1772606:4700::6812:18b12606:4700::6812:19b1
Cloudflareserves the site
NS
tosana.ns.cloudflare.comdeborah.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
mailstream-east.mxrecord.iomailstream-west.mxrecord.iomailstream-central.mxrecord.mx
Salesforcereceives its email
TLS
werner.com
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 104.18.24.177
  • 104.18.25.177

AAAA 2

  • 2606:4700::6812:18b1
  • 2606:4700::6812:19b1

MX 3

  • 10mailstream-east.mxrecord.io
  • 10mailstream-west.mxrecord.io
  • 20mailstream-central.mxrecord.mx

TXT 24

  • MS=ms46680617
  • MS=ms59916421
  • MS=ms75397533
  • _hxpjdadt54xi0kupzy3r40zcrvqck7u
  • mandrill_verify.ShNcBaqqVPFqZeqQeKtipA
  • 4709029f80ac6c3222df17c9ed67e1b93d655d31
  • dropbox-domain-verification=4mb3sif53zxf
  • apple-domain-verification=PmGkDfX0n6RWviwW
  • docker-verification=e6f9bc9f-1e7d-4b44-a600-38b0131107e2
  • confluent-verification=0ed519fc-1834-4116-beae-399978894b04

NS 2

  • tosana.ns.cloudflare.com
  • deborah.ns.cloudflare.com

SOA 1

  • deborah.ns.cloudflare.com dns.cloudflare.com

SRV 2

  • pxs1.werner.com:5060 p0
  • pxs1.werner.com:5061 p0

TLS Certificates (3)

Common NameIssuerExpires
werner.com C=US, O=Google Trust Services, CN=WE1 Wed, 30 Sep 2026 12:22:57 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for werner.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for werner.com <a href="https://domaindrift.io/t/werner.com"> <img src="https://domaindrift.io/badge/werner.com.svg" width="300" height="64" alt="DomainDrift signed observations for werner.com"> </a>

Ed25519 Receipt

Receipt ID
eda41f88-8e59-4bda-bff1-9e11d87ef03d
Output Hash
3e24b32e549485e8e87cf847f248509a63a9d0f54c2e540b560e0c4bce4f39a0
Signature
ed25519:1d250b2637d64185f90022de95f71c5cd2666b4caf106f7ea9113668102a0c0cef9fd97981dba43e270206b91f4ed9c01382dc41ffe4a88a64bccee5a5dd0706
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser