attackerkb.com

Observed Jul 25, 2026, 14:57 UTC (7d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Guarded by a firewall

Secured byAmazon

Also usesGoogle Search Console

tranco

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat attackerkb.com actually stands on - every host below is a signed observation

attackerkb.com

A / AAAA

18.67.76.5918.67.76.4218.67.76.11418.67.76.105

unattributedserves the site

ns-1349.awsdns-40.orgns-1598.awsdns-07.co.ukns-31.awsdns-03.comns-773.awsdns-32.net

awsdns-40.org + awsdns-07.co.uk + moreanswers its DNS

inbound-smtp.us-east-1.amazonaws.com

amazonaws.comreceives its email

TLS

attackerkb.com

Amazonissued its certificate

DNS Records

A 4

18.67.76.59
18.67.76.42
18.67.76.114
18.67.76.105

MX 1

10inbound-smtp.us-east-1.amazonaws.com

TXT 3

google-site-verification=qkvskXyrwjjmyimg93axklZ0v1vbTggJvmdFhaGxmCc
v=spf1 include:attackerkb.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email

NS 4

ns-1349.awsdns-40.org
ns-1598.awsdns-07.co.uk
ns-31.awsdns-03.com
ns-773.awsdns-32.net

SOA 1

ns-1598.awsdns-07.co.uk awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common Name	Issuer	Expires
`attackerkb.com`	C=US, O=Amazon, CN=Amazon RSA 2048 M01	Tue, 09 Mar 2027 23:59:59 +0000
`Amazon RSA 2048 M01`	C=US, O=Amazon, CN=Amazon Root CA 1	Fri, 23 Aug 2030 22:21:28 +0000
`Amazon Root CA 1`	C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2	Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for attackerkb.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/attackerkb.com">
  <img src="https://domaindrift.io/badge/attackerkb.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for attackerkb.com">
</a>

Ed25519 Receipt

Receipt ID: rcpt_90b0d66b71d6c21d
Output Hash: fbd023a46c54a7d62287e71b93e53cc482f72fa25c3ee96e7f64b8f3fd4cf3a9
Signature: ed25519:ecd1e1b6be52f8751f5a5544fa70296e2933b76ff8f51a6bf60eda3975c217040dbf6fe8d446aef1f8c016c2e8f160cda0b6dd16c97a6f5d3fd999b80bcc9d0b
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/attackerkb.com