CONTINUOUS INTERNET TELEMETRY24H DRIFT6,914 material changesacross 6,500 domains · last 24h · -3,501 vs yesterdayDNS DRIFT433 domains changed DNS providertop destination cloudflare.com · -226 vs yesterdayEMAIL DRIFT103 domains switched email providertop destination google.com · -64 vs yesterdayCERT DRIFT143 domains switched issuing CA24h · -76 vs yesterdayNOW471 curated domains not reachable-232 vs yesterdaySITE ERRORS17,376 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,713 sites429 rate-limit / 403 bot-block, a posture signal

ctmirror.org

Observed Jul 24, 2026, 01:48 UTC (7h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onAutomattic
Email byMicrosoft 365
Secured byGoogle Trust Services
Registered withGoDaddy.com, LLC
Also usesFacebook/MetaGoogle Search Console
tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ctmirror.org actually stands on - every host below is a signed observation
ctmirror.org
A / AAAA
192.0.78.146192.0.78.196
Automatticserves the site
NS
buck.ns.cloudflare.comeloise.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
ctmirror-org.mail.protection.outlook.com
Microsoft 365receives its email
TLS
tls.automattic.com
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 192.0.78.146
  • 192.0.78.196

MX 1

  • 0ctmirror-org.mail.protection.outlook.com

TXT 9

  • MS=BFFB966DC318C5E9D9AB016B50E4E43450F046F4
  • MS=ms23371580
  • atomic-domain-932f4f68e8b1182c1efaf5abd1510daf8d88133fd9a3435efd06ab559e2a2854
  • facebook-domain-verification=xtohixhn8fln5ygzmfax1ltfe3rs2x
  • google-site-verification=Gs7jErYaUZmLPCOLvRDvQHnAG7gsmPo11c4Ei6ltylM
  • google-site-verification=Kf2h_yjkASCCCd0JbhDK4kzA6SOHmBZYNH4PAZuc_Hk
  • google-site-verification=M9m0I4gya5OaCpJccLdEQnXFn_gVR13zHKJJ8j1Tvzs
  • v=spf1 include:spf.protection.outlook.com include:_spf.salesforce.com include:servers.mcsv.net ip4:51.4.72.0/24 ip4:51.5.72.0/24 ip4:51.5.80.0/27 ip4:20.47.149.138/32 ip4:51.4.80.0/27 ip6:2a01:4180:4051:0800::/64 ip6:2a01:4180:4050:0800::/64 ip6:2a01:4180:4051:0400::/64 ip6:2a01:4180:4050:0400::/64 ip4:74.117.200.0/21 ip4:160.34.0.0/16 ip4:129.152.0.0/17 ip4:141.145.85.0/24 ip4:216.136.168.32/28 ip4:216.136.168.64/27 ip4:64.56.194.128/25 ip6:2606:b400::/32 ip6:2a02:6900:8804::/48 ~all
  • v=DMARC1;p=none;

NS 2

  • buck.ns.cloudflare.com
  • eloise.ns.cloudflare.com

SOA 1

  • buck.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common NameIssuerExpires
tls.automattic.com C=US, O=Google Trust Services, CN=WR1 Tue, 22 Sep 2026 11:44:11 +0000
WR1 C=US, O=Google Trust Services LLC, CN=GTS Root R1 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R1 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ctmirror.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ctmirror.org <a href="https://domaindrift.io/t/ctmirror.org"> <img src="https://domaindrift.io/badge/ctmirror.org.svg" width="300" height="64" alt="DomainDrift signed observations for ctmirror.org"> </a>

Ed25519 Receipt

Receipt ID
rcpt_52c990b9f90ba264
Output Hash
d288842119ea8a3a29566fc71be26faed0b2bba52e95f7327e4c8c9d9c91f4ed
Signature
ed25519:4b56141c73677eb19f97131cfd979cc882b40a853c3d3a98b8ac0261ea0ab70880460ae38627542abea6dabf75ca1534a68f5b35a22fa3cbe65d875df3f60c04
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser