CONTINUOUS INTERNET TELEMETRY24H DRIFT1,410 material changesacross 1,270 domains · -226 vs yesterdayDNS DRIFT14 domains changed DNS providertop destination commonmx.com · -3 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination helpsystems.com · -1 vs yesterdayNOW20,522 curated domains not answering+6,099 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,410 material changesacross 1,270 domains · -226 vs yesterdayDNS DRIFT14 domains changed DNS providertop destination commonmx.com · -3 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination helpsystems.com · -1 vs yesterdayNOW20,522 curated domains not answering+6,099 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block

anduril.dev

Observed 2026-07-14T12:59:10.486Z (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Runs onCloudflare
Email byProofpoint
Registered withMarkMonitor Inc.
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat anduril.dev actually stands on - every host below is a signed observation
anduril.dev
NS
ha2.markmonitor.zoneha1.markmonitor.zoneha3.markmonitor.zoneha4.markmonitor.zone
markmonitor.zoneanswers its DNS
MX
andurilind.mail.protection.office365.us
Proofpointreceives its email

HTTPS probe

server_error Server error (5xx) 530 Server Error
HTTP status530
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time80 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

MX 1

  • 10andurilind.mail.protection.office365.us

TXT 10

  • f11js2wg00snv706yfxkzyl083xllsm1
  • _xcknua707l83uhyfnff7spqkzvy12ds
  • zqnkqd1sbpwjdwhz2k187y7fpgnx6k9v
  • 702d1t8dcmb2c3g48gbtytmd1v7l8n8h
  • MS=ms31428149
  • v=spf1 include:spf-00660a02.gpphosted.com include:spf.protection.office365.us ~all
  • _dmvko799mcljbf3yzas72zz37c2b7ys
  • _yuw58e081s35ev05ruztgzzo3gc1768
  • md2zskw46tn4mhtyyjzmp3xvd8z37nls
  • v=DMARC1; p=none; rua=mailto:q6pn5sgx@ag.us.dmarcian.com;

NS 4

  • ha2.markmonitor.zone
  • ha1.markmonitor.zone
  • ha3.markmonitor.zone
  • ha4.markmonitor.zone

SOA 1

  • ha1.markmonitor.zone hostmaster.markmonitor.com

TLS Certificates (0)

None.

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for anduril.dev. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for anduril.dev <a href="https://domaindrift.io/t/anduril.dev"> <img src="https://domaindrift.io/badge/anduril.dev.svg" width="300" height="64" alt="DomainDrift signed observations for anduril.dev"> </a>

Ed25519 Receipt

Receipt ID
dc5cc1e3-e2bf-4578-92e7-67a48bf1adfa
Output Hash
67d74257f831be32a67b1cad219bfe59becdc2ef27a0e0926bf55f8c8db10329
Signature
ed25519:2052a11888e636d61b491e5dfed97cb40b51dd8c481ba9bb4f66557abea757e1a429615d600ec537b6c17179918957bb139da917f6177efbda41744ff5bb0f0c
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser