CONTINUOUS INTERNET TELEMETRY24H DRIFT432 material changesacross 394 domains · -226 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,215 curated domains not answering+386 vs yesterdayERRORS21,322 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED59,178 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT432 material changesacross 394 domains · -226 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,215 curated domains not answering+386 vs yesterdayERRORS21,322 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED59,178 throttled or blocked our scanner429 rate-limit / 403 bot-block

cidara.com

Observed Jul 18, 2026, 12:09 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onAmazon
Email byMicrosoft 365
Secured bySectigo
Registered withMarkMonitor Inc.
Also usesZoom
1 subdomain · pharma_biotech
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat cidara.com actually stands on - every host below is a signed observation
cidara.com
A / AAAA
166.117.53.1723.33.166.197
Amazonserves the site
NS
dns1.p03.nsone.netdns2.p03.nsone.netdns3.p03.nsone.netdns4.p03.nsone.net+4 more
nsone.net + msddns.comanswers its DNS
MX
cidara-com.mail.protection.outlook.com
Microsoft 365receives its email
TLS
webreds.americas-cert12.cf.webappsp.com
Sectigo Limitedissued its certificate

DNS Records

A 2

  • 166.117.53.172
  • 3.33.166.197

MX 1

  • 0cidara-com.mail.protection.outlook.com

TXT 8

  • 69oOdqwSteviVsPb58MGKFoP1Z+VxQp31ZeOrsh7/P4N0QHIgH8O4u4bMqKEOTeE+7DkwGJ2ZygMkVmBZpRpNA==
  • citrix-verification-code=90df0cd8-bd64-45ac-b6ef-e437166b3355
  • MS=ms85676367
  • ppe-a5a2445b3b5c7234423e
  • v=spf1 include:spf.protection.outlook.com ip4:4.79.33.132/32 include:spf.tipalti.com include:spfa.cpmails.com include:_spf.salesforce.com -all
  • ZOOM_verify_vqFUTyJWQDWbf5YCuVpvxQ
  • 5868eb0d-1fef-46fe-87fb-1a7841fae5ce
  • v=DMARC1;p=quarantine;sp=reject;pct=100;rua=mailto:cidaratherapeutics@us.cp-dmarc.com,mailto:re+scufetvs6mz@dmarc.postmarkapp.com;ruf=mailto:cidaratherapeutics@us.cp-dmarc.com;ri=86400;aspf=r;adkim=r;fo=1;

NS 8

  • dns1.p03.nsone.net
  • dns2.p03.nsone.net
  • dns3.p03.nsone.net
  • dns4.p03.nsone.net
  • ns01.msddns.com
  • ns02.msddns.com
  • ns03.msddns.com
  • ns04.msddns.com

SOA 1

  • dns1.p03.nsone.net hostmaster.nsone.net

TLS Certificates (3)

Common NameIssuerExpires
webreds.americas-cert12.cf.webappsp.com C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36 Fri, 29 Jan 2027 23:59:59 +0000
Sectigo Public Server Authentication CA OV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Wed, 21 Mar 2046 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cidara.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for cidara.com <a href="https://domaindrift.io/t/cidara.com"> <img src="https://domaindrift.io/badge/cidara.com.svg" width="300" height="64" alt="DomainDrift signed observations for cidara.com"> </a>

Ed25519 Receipt

Receipt ID
6b672903-63e9-49da-bbad-23cb7fbb5ae4
Output Hash
2855bbbac23d890763099c179659cdd1d6d7af97db4fb927622a6dfe5d705adc
Signature
ed25519:2f3f4b9d8032ee35e1875792b1d84d12b1471e1cbc19b95e10666f4e632e1af2f4f78a8103386d4958bf4bba47cb99bff9d17c916f383c683dc30d10c6d6b00d
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser