CONTINUOUS INTERNET TELEMETRY24H DRIFT6,258 material changesacross 5,978 domains · +5,349 vs yesterdayDNS DRIFT389 domains changed DNS providertop destination parity.domains · +363 vs yesterdayEMAIL DRIFT83 domains switched email providertop destination google.com · +75 vs yesterdayCERT DRIFT149 domains switched issuing CA24h · +126 vs yesterdayNOW1,901 curated domains not answering-809 vs yesterdayERRORS21,174 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED92,496 throttled or blocked our scanner429 rate-limit / 403 bot-block

level.finance

Observed Jul 21, 2026, 19:27 UTC (17h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onAmazon
Email byGoogle Workspace
Secured byLet's Encrypt
Registered withNameCheap, Inc.
Also usesGoogle Search Console
web3_defi
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat level.finance actually stands on - every host below is a signed observation
level.finance
A / AAAA
76.76.21.21
Amazonserves the site
NS
laylah.ns.cloudflare.comwoz.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
aspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
level.finance
Let's Encryptissued its certificate

DNS Records

A 1

  • 76.76.21.21

MX 5

  • 1aspmx.l.google.com
  • 10aspmx2.googlemail.com
  • 10aspmx3.googlemail.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 3

  • google-site-verification=Lv3wuXvC2npxCWE9X-IKQ1PWosKBwqBwliJKtBHqvh0
  • v=spf1 include:_spf.google.com ~all
  • v=DMARC1; p=none; rua=mailto:hp+dmarc@level.finance

NS 2

  • laylah.ns.cloudflare.com
  • woz.ns.cloudflare.com

SOA 1

  • laylah.ns.cloudflare.com dns.cloudflare.com

CAA 10

  • issue "comodoca.com"
  • issue "digicert.com; cansignhttpexchanges=yes"
  • issue "letsencrypt.org"
  • issue "pki.goog; cansignhttpexchanges=yes"
  • issue "ssl.com"
  • issuewild "comodoca.com"
  • issuewild "digicert.com; cansignhttpexchanges=yes"
  • issuewild "letsencrypt.org"
  • issuewild "pki.goog; cansignhttpexchanges=yes"
  • issuewild "ssl.com"

TLS Certificates (3)

Common NameIssuerExpires
level.finance C=US, O=Let's Encrypt, CN=YR1 Thu, 10 Sep 2026 22:41:47 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for level.finance. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for level.finance <a href="https://domaindrift.io/t/level.finance"> <img src="https://domaindrift.io/badge/level.finance.svg" width="300" height="64" alt="DomainDrift signed observations for level.finance"> </a>

Ed25519 Receipt

Receipt ID
rcpt_6f9b4b0d504bf337
Output Hash
4f69a8597980e0b30c86d8d0ed1a7c35e7b430a2a730db1da22526e99650d1c7
Signature
ed25519:bd0d7046d1e4682793834892a89149683f82ba9ff0ab63609e420df2a3f10f2b46d27e4cf99d813ae97156b3c42ffe5614aaf240add4c2788176e6fd7bc2f008
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser