CONTINUOUS INTERNET TELEMETRY24H DRIFT502 material changesacross 449 domains · -156 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,082 curated domains not answering+253 vs yesterdayERRORS20,530 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED56,585 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT502 material changesacross 449 domains · -156 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,082 curated domains not answering+253 vs yesterdayERRORS20,530 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED56,585 throttled or blocked our scanner429 rate-limit / 403 bot-block

salesforce.com

Observed Jul 18, 2026, 12:01 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onAkamai International B.V
Email byProofpoint
Secured byDigiCert
Registered withMarkMonitor Inc.
Also usesDockerGoogle Search ConsoleZoomNotionHubSpotStripeAtlassian
1 subdomain · big_tech
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat salesforce.com actually stands on - every host below is a signed observation
salesforce.com
A / AAAA
23.1.99.13023.1.106.133104.109.10.129104.109.11.129+4 more
Akamai International B.Vserves the site
NS
pch1.salesforce-dns.compch2.salesforce-dns.comudns1.salesforce.comudns2.salesforce.com+2 more
salesforce-dns.com + salesforce.comanswers its DNS
MX
mxa-00177002.gslb.pphosted.commxb-00177002.gslb.pphosted.com
Proofpointreceives its email
TLS
salesforce.com
DigiCert Incissued its certificate

DNS Records

A 8

  • 23.1.99.130
  • 23.1.106.133
  • 104.109.10.129
  • 104.109.11.129
  • 184.25.179.132
  • 184.31.3.130
  • 184.31.10.133
  • 23.1.35.132

MX 2

  • 10mxa-00177002.gslb.pphosted.com
  • 10mxb-00177002.gslb.pphosted.com

TXT 39

  • 00DF0000000gZsuMAE
  • 00DF0000000gZsumae
  • SFMC-cGJQFeEomoQQt-tQ3c_QXefdwzOGuj_Tjl4oWwrW
  • jamf-site-verification=6VMo4NqTt2upSV1B7wb8sw
  • canva-site-verification=_abffN3m74Bc2XZ_68lccw
  • cloudhealth=7fe179e6-9085-4d4a-b2cd-eeb11f0c2468
  • docker-verification=b238c187-0eb6-4710-ac1f-0d2ed19765b5
  • mixpanel-domain-verify=f2151de7-1e89-41b1-8968-b7cdd8df6740
  • vmware-cloud-verification-edb072dd-c0ed-478e-a55f-1aa17364e617
  • remarkable-domain-verification=394b7d94-d630-4c40-ac32-413a38622f73

NS 6

  • pch1.salesforce-dns.com
  • pch2.salesforce-dns.com
  • udns1.salesforce.com
  • udns2.salesforce.com
  • udns3.salesforce.com
  • udns4.salesforce.com

SOA 1

  • mastername.salesforce.com hostmaster.salesforce.com

TLS Certificates (2)

Common NameIssuerExpires
salesforce.com C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1 Fri, 02 Oct 2026 23:59:59 +0000
DigiCert Global G3 TLS ECC SHA384 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G3 Mon, 23 Sep 2030 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for salesforce.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for salesforce.com <a href="https://domaindrift.io/t/salesforce.com"> <img src="https://domaindrift.io/badge/salesforce.com.svg" width="300" height="64" alt="DomainDrift signed observations for salesforce.com"> </a>

Ed25519 Receipt

Receipt ID
d60d7b0a-6cd6-46b6-a3aa-0fd46f0ad24a
Output Hash
6f8b5f3a4bbb0791f5b554769c3585ee6da21e79a37563e6517ba5d8874258f9
Signature
ed25519:ca0e6c7a16273a543c9f76ad17bc9c1177b2e592e5ddd9b6f1dc44d8baca508bcc55839c2b33a802caf7b0493fe132f06d4dd7ef06f58b838a3fd6b353f6f402
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser