CONTINUOUS INTERNET TELEMETRY24H DRIFT7,043 material changesacross 6,631 domains · last 24h · -3,372 vs yesterdayDNS DRIFT435 domains changed DNS providertop destination cloudflare.com · -224 vs yesterdayEMAIL DRIFT104 domains switched email providertop destination google.com · -63 vs yesterdayCERT DRIFT144 domains switched issuing CA24h · -75 vs yesterdayNOW478 curated domains not reachable-225 vs yesterdaySITE ERRORS17,391 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,730 sites429 rate-limit / 403 bot-block, a posture signal

shudder.com

Observed Jul 24, 2026, 02:49 UTC (5h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Secured byAmazon
Registered withMarkMonitor Inc.
Also usesDocuSignGoogle Search Console
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat shudder.com actually stands on - every host below is a signed observation
shudder.com
A / AAAA
23.20.143.6254.85.180.1163.222.199.172
Cloudflareserves the site
NS
dns1.p01.nsone.netdns2.p01.nsone.netdns3.p01.nsone.netdns4.p01.nsone.net+4 more
nsone.net + amcndns.comanswers its DNS
MX
shudder-com.mail.protection.outlook.com
Microsoft 365receives its email
TLS
www.rljentertainment.com
Amazonissued its certificate

DNS Records

A 3

  • 23.20.143.62
  • 54.85.180.116
  • 3.222.199.172

MX 1

  • 0shudder-com.mail.protection.outlook.com

TXT 12

  • amazonses:JZbZGA8B02qMrCUag0WsgKJeXQ5kyNXJr1z1eVZ2cFs=
  • docusign=00bbf7a7-f864-42a8-a162-1ff7c72dbbd2
  • MS=ms10757953
  • google-site-verification=Xwr4p8GUZHJjYFyRbJE6-1D9DTSh5S8ZQjagOwMwerk
  • v=spf1 exists:%{i}._i.%{d}._d.espf.agari.com include:%{d}.4f.spf-protect.agari.com -all
  • google-site-verification=utglniRcVXCKtWXorguCHB6-EjaqGh3NpQBnDJO7zL4
  • google-site-verification=SPLFSvjOgdSkHBFMP9RD_O2OdyiiPOjlcCazWLpsMeU
  • cHU+Sgd7FTH+POJ9OIYpXlZYBTyQbrNNX60FRLH2jrU9V2voQbbEJ1TPpjlZGc0iY7PWVIwuMfjNhTh21aLC7A==
  • oc21pcua2gicagkepavp31v778
  • airtable-verification=6f9c41d9dbfacc143c7f978e98a9646d

NS 8

  • dns1.p01.nsone.net
  • dns2.p01.nsone.net
  • dns3.p01.nsone.net
  • dns4.p01.nsone.net
  • ns01.amcndns.com
  • ns02.amcndns.com
  • ns03.amcndns.com
  • ns04.amcndns.com

SOA 1

  • dns1.p01.nsone.net hostmaster.shudder.com

TLS Certificates (3)

Common NameIssuerExpires
www.rljentertainment.com C=US, O=Amazon, CN=Amazon RSA 2048 M01 Fri, 11 Dec 2026 23:59:59 +0000
Amazon RSA 2048 M01 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:21:28 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for shudder.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for shudder.com <a href="https://domaindrift.io/t/shudder.com"> <img src="https://domaindrift.io/badge/shudder.com.svg" width="300" height="64" alt="DomainDrift signed observations for shudder.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_5835f05d77694754
Output Hash
e6938ea228bb9024e1957d915fe3d1220f30d2f34bfc86087893151c8e30ef8e
Signature
ed25519:343f14183cb1c3318c6c256aeef128c0d8830df33d2a2d8aecec0d1cea7c1daf318040848a02de8c7768cb9800be903df2f0286bdefe4947468f254e3e53ad0e
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser