CONTINUOUS INTERNET TELEMETRY24H DRIFT3,174 material changesacross 2,745 domains · -224 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,319 curated domains not answering-6,399 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,174 material changesacross 2,745 domains · -224 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,319 curated domains not answering-6,399 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 403

crl.com

Observed 2026-07-12T16:32:47.008Z (12h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMimecast
Also usesDocuSignFacebook/MetaDocker
IPv6 · 3 subdomains · pharma_biotech
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat crl.com actually stands on - every host below is a signed observation
crl.com
A / AAAA
104.18.42.206172.64.145.502606:4700:4400::6812:2ace2a06:98c1:310c::ac40:9132
Cloudflareserves the site
NS
ns-edi.crl.comns0044.secondary.cloudflare.comawuz-it-ibx-ext-01.crl.comns0168.secondary.cloudflare.com
crl.com + cloudflare.comanswers its DNS
MX
us-smtp-inbound-2.mimecast.comus-smtp-inbound-1.mimecast.com
Mimecastreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.criver.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time274 ms
DNS resolutionNOERROR
Redirect chain
https://www.criver.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 104.18.42.206
  • 172.64.145.50

AAAA 2

  • 2606:4700:4400::6812:2ace
  • 2a06:98c1:310c::ac40:9132

MX 2

  • 10us-smtp-inbound-2.mimecast.com
  • 10us-smtp-inbound-1.mimecast.com

TXT 35

  • v=spf1 include:_spf1.crl.com include:_spf2.crl.com ~all
  • H/WypZKR35TQRgeSxrkDVY2XBU+KW2WaQeEPCUodaSvr7TXssyWt1a8wKyy1wFAybYkiZucR0C7EuvMJQA3enA==
  • GUID:a01f679b-6acf-464b-a852-7a8431337fee
  • nintex.5fc73e4348d6960070e1faf5
  • 7mh55jtcqknys41fzwsq5c1stzrqyhjk
  • nintex.6075fd22a13324006c47ea84
  • _jegwl0025r6me34aa8kpaihxuzqzn8f
  • _5yhrbxaex476eiiu51afjm1q7qbu9s3
  • docusign=9c291a3d-c659-4860-aa3f-56391f3133f3
  • cisco-ci-domain-verification=23cfec2b3eac1dcafc2445afef43458f5ee0db6661158c9ee1f2e9ba2cf18198

NS 4

  • ns-edi.crl.com
  • ns0044.secondary.cloudflare.com
  • awuz-it-ibx-ext-01.crl.com
  • ns0168.secondary.cloudflare.com

SOA 1

  • awuz-it-ibx-ext-01.crl.com hostmaster.crl.com

TLS Certificates (0)

None.

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for crl.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for crl.com <a href="https://domaindrift.io/t/crl.com"> <img src="https://domaindrift.io/badge/crl.com.svg" width="300" height="64" alt="DomainDrift signed observations for crl.com"> </a>

Ed25519 Receipt

Receipt ID
d58f0937-9446-4681-b749-47cc63345f6b
Output Hash
9aef7e5d49a604345e74d9b51da445186473dda2f92c2cc1dd07f874e4d9d122
Signature
ed25519:f37563ee7f4ed1ef6511ede51b0e56c5a3ce9d242f6e156969bb20d91cad8d7b84f5c3a5f4270642ffe09e671c28a9aa7b29852ab5921bb810e6b2107fa6a80c
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser