CONTINUOUS INTERNET TELEMETRY24H DRIFT6,846 material changesacross 6,546 domains · +5,937 vs yesterdayDNS DRIFT430 domains changed DNS providertop destination parity.domains · +404 vs yesterdayEMAIL DRIFT90 domains switched email providertop destination google.com · +82 vs yesterdayCERT DRIFT158 domains switched issuing CA24h · +135 vs yesterdayNOW1,810 curated domains not answering-900 vs yesterdayERRORS20,966 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED92,782 throttled or blocked our scanner429 rate-limit / 403 bot-block

coterra.com

Observed Jul 21, 2026, 19:14 UTC (18h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onMicrosoft Corporation
Email byMimecast
Secured byLet's Encrypt
Registered withCloudflare, Inc.
Also usesZoomDocuSignGoogle Search Console
2 subdomains · energy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat coterra.com actually stands on - every host below is a signed observation
coterra.com
A / AAAA
52.171.218.246
Microsoft Corporationserves the site
NS
elma.ns.cloudflare.comlee.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
US-SMTP-INBOUND-1.MIMECAST.comUS-SMTP-INBOUND-2.MIMECAST.com
Mimecastreceives its email
TLS
coterra.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 52.171.218.246

MX 2

  • 0US-SMTP-INBOUND-1.MIMECAST.com
  • 10US-SMTP-INBOUND-2.MIMECAST.com

TXT 11

  • MS=ms43457672
  • ZOOM_verify_5tVYcualb0H8nAaOdH0Rcf
  • _pgpmhskgdj13yj3pb0spvt0ohyydmnw
  • bw=yyVHHVOVn4QzdBKvi05wHzvitZRbvNlcGEVzirnSLRQ4
  • docusign=67dbefa5-688b-43da-83b0-f2cc96475819
  • google-site-verification=OhCkylmWlx6vDgDfXP2YckUmKTH-Z67XT_1pB4kutLk
  • hibp-verify=dweb_ve5pm4iomoik3xbqghrhfkvk
  • knowbe4-site-verification=ac475e6faff71c8116cf12eaa583bcb6
  • recruitee-add-admin=bhakti.shah@coterra.com
  • v=spf1 a mx ip4:216.117.60.250 ip4:149.72.75.134 ip4:167.172.20.75 ip4:65.36.11.154 ip4:4.2.238.219 ip4:198.21.6.113 ip4:168.245.40.179 ip4:4.2.238.216 ip4:4.2.238.221 ip4:52.171.218.246 ip4:64.207.242.100 ip4:174.78.67.228 ip4:64.207.242.121 ip4:174.78.67.249 include:us._netblocks.mimecast.com include:_spf.psm.knowbe4.com include:servers.mcsv.net include:spf.protection.outlook.com -all

NS 2

  • elma.ns.cloudflare.com
  • lee.ns.cloudflare.com

SOA 1

  • elma.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common NameIssuerExpires
coterra.com C=US, O=Let's Encrypt, CN=YR2 Thu, 10 Sep 2026 15:48:55 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for coterra.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for coterra.com <a href="https://domaindrift.io/t/coterra.com"> <img src="https://domaindrift.io/badge/coterra.com.svg" width="300" height="64" alt="DomainDrift signed observations for coterra.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_ae930518605d75dd
Output Hash
d0489f18b68b589355ddc2e61379e7cee320175b5068f30845ab98b284843c0a
Signature
ed25519:691ffae45a0689a09cd7437e0b3e67e0d226f9da95635b27a091534469b39690c090f11581a5040bbe15f23e0142ff8b799cca88c9983d6e8f9caea226fcd809
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser