CONTINUOUS INTERNET TELEMETRY24H DRIFT2,433 material changesacross 2,314 domains · +1,011 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.com · -6 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +3 vs yesterdayCERT DRIFT46 domains switched issuing CA24h · +46 vs yesterdayNOW772 curated domains not answering+62 vs yesterdayERRORS6,031 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED16,292 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,433 material changesacross 2,314 domains · +1,011 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.com · -6 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +3 vs yesterdayCERT DRIFT46 domains switched issuing CA24h · +46 vs yesterdayNOW772 curated domains not answering+62 vs yesterdayERRORS6,031 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED16,292 throttled or blocked our scanner429 rate-limit / 403 bot-block

hotdocs.com

Observed 2026-07-18T12:17:14.362156474+00:00 (7h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle (SPF sender)
Secured byGoogle Trust Services
Registered withGoDaddy.com, LLC
Also usesHubSpotAtlassian
legal_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat hotdocs.com actually stands on - every host below is a signed observation
hotdocs.com
A / AAAA
141.193.213.21141.193.213.20
Cloudflareserves the site
NS
ns1-01.azure-dns.comns2-01.azure-dns.netns3-01.azure-dns.orgns4-01.azure-dns.info
azure-dns.com + azure-dns.net + moreanswers its DNS
MX
mx1.hc4996-64.iphmx.commx2.hc4996-64.iphmx.com
Google (SPF sender)receives its email
TLS
hotdocs.com
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 141.193.213.21
  • 141.193.213.20

MX 2

  • 5mx1.hc4996-64.iphmx.com
  • 5mx2.hc4996-64.iphmx.com

TXT 6

  • v=spf1 ip4:139.138.57.228/32 ip4:68.232.145.169/32 ip4:97.75.189.70 ip4:217.144.148.114 ip4:184.172.43.26 include:spf.protection.outlook.com include:auth.msgapp.com include:5861831.spf02.hubspotemail.net include:_spf.google.com ~all
  • atlassian-domain-verification=e2ywp+/W1MxQUyXQzzgrT0zYgCGQ28hMluFas1Yu7eNv3OBha6I6ZqFhiD6GsB5Y
  • MS=ms15118938
  • atlassian-domain-verification=fMRikxpa8XkztU5y0mj3kQdPLn3aT/nbZlqga6QkJfbIPJdc4Ak69aJQt9AD6oY1
  • ltg3lel0099h9a17bmpqm21vop
  • v=DMARC1; p=quarantine; rua=mailto:dmarc@mitratech.com; fo=1

NS 4

  • ns1-01.azure-dns.com
  • ns2-01.azure-dns.net
  • ns3-01.azure-dns.org
  • ns4-01.azure-dns.info

SOA 1

  • ns1-01.azure-dns.com azuredns-hostmaster.microsoft.com

TLS Certificates (3)

Common NameIssuerExpires
hotdocs.com C=US, O=Google Trust Services, CN=WE1 Tue, 22 Sep 2026 23:05:11 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for hotdocs.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for hotdocs.com <a href="https://domaindrift.io/t/hotdocs.com"> <img src="https://domaindrift.io/badge/hotdocs.com.svg" width="300" height="64" alt="DomainDrift signed observations for hotdocs.com"> </a>

Ed25519 Receipt

Receipt ID
571a2a91-49b3-44f0-a342-0abb3d6dd7b9
Output Hash
0d27f4d43666159dfae4980e63c9ef31290266b44ed1ba20375be02851dac04d
Signature
ed25519:d488006c32f6bcca4d906fda96bf7a56904454f8185ad6dcbe528c941a024dc1176fee1e06e8bb1a2c6ff9c7373510881bceb6e29192e7c92161b22223cd4e09
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser