CONTINUOUS INTERNET TELEMETRY24H DRIFT3,364 material changesacross 2,911 domains · last 24h · -7,051 vs yesterdayDNS DRIFT180 domains changed DNS providertop destination cloudflare.com · -479 vs yesterdayEMAIL DRIFT26 domains switched email providertop destination google.com · -141 vs yesterdayCERT DRIFT39 domains switched issuing CA24h · -180 vs yesterdayNOW493 curated domains not reachable-210 vs yesterdaySITE ERRORS17,823 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 100,607 sites429 rate-limit / 403 bot-block, a posture signal

amtrustgroup.com

Observed Jul 21, 2026, 17:27 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Email byProofpoint
Secured byCorporation Service Company
tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat amtrustgroup.com actually stands on - every host below is a signed observation
amtrustgroup.com
A / AAAA
172.110.251.137
unattributedserves the site
NS
ns3.amtrustgroup.comns1.amtrustgroup.comns2.amtrustgroup.com
amtrustgroup.comanswers its DNS
MX
mx0b-00211c01.pphosted.commx0a-00211c01.pphosted.com
Proofpointreceives its email
TLS
*.amtrustgroup.com
Corporation Service Companyissued its certificate

DNS Records

A 1

  • 172.110.251.137

MX 2

  • 100mx0b-00211c01.pphosted.com
  • 100mx0a-00211c01.pphosted.com

TXT 26

  • onetrust-domain-verification=94d0f1ea6c6749c1857f2eb0b20708ac
  • 6D6qk/4MJbo/JMhINAOrP40jZoTSJtRRi0xvnocGHorQDsbeXWgw8XNfXBID19Kx/Z7gO4Wj1jv+kKCgWhzy2Q==
  • k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB
  • cisco-ci-domain-verification=c394f196631ea245704762da7bd91b94fea23ec5fcb2365f6333b9dcafdf35d
  • apple-domain-verification=LG4OLGEbc7bUaat7
  • teamviewer-sso-verification=17a8e564b1ec462f95dec7518fbcb00f
  • QCosJU1U7KL0bKIcdggK3pr6F0Ng1+IhD1FZwD5cRHKzvDlWV7Nul801h58+t5aMlSjaxwKyv3y7F4SkCB5KCw==
  • MS=ms42386782
  • 00D1N000001ip5b=1TBUr00000009Pt
  • smartsheet-site-validation=-FExgNduOoq-CYnODY8q6mO7VVCHrQ90

NS 3

  • ns3.amtrustgroup.com
  • ns1.amtrustgroup.com
  • ns2.amtrustgroup.com

SOA 1

  • ns1.amtrustgroup.com itops.amtrustgroup.com

SRV 1

  • autodiscover.amtrustgroup.com:443 p0

TLS Certificates (2)

Common NameIssuerExpires
*.amtrustgroup.com C=US, ST=DE, L=Wilmington, O=Corporation Service Company, CN=Trusted Secure Certificate Authority DV Thu, 29 Oct 2026 23:59:59 +0000
Trusted Secure Certificate Authority DV C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Sun, 20 Dec 2026 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for amtrustgroup.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for amtrustgroup.com <a href="https://domaindrift.io/t/amtrustgroup.com"> <img src="https://domaindrift.io/badge/amtrustgroup.com.svg" width="300" height="64" alt="DomainDrift signed observations for amtrustgroup.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_1171d6ecb1628117
Output Hash
4c0aa09e9c7baf0ee0c26c44d0235c4622de9895043c84bd99241136d3a56179
Signature
ed25519:d0758259c0cbc1b47fd3e2a81754d37c30ae5e8f1ea70ee5b834f76cc0b975a0a993d586d7b8b19598573d3ee72845f0f377529633837a2bf354264b8ae5ad02
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser