CONTINUOUS INTERNET TELEMETRY24H DRIFT2,576 material changesacross 2,361 domains · +25 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination cloudflare.com · -1 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT2 domains switched issuing CA24h · -3 vs yesterdayNOW3,366 curated domains not answeringlast probe, steadyERRORS10,891 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,576 material changesacross 2,361 domains · +25 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination cloudflare.com · -1 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT2 domains switched issuing CA24h · -3 vs yesterdayNOW3,366 curated domains not answeringlast probe, steadyERRORS10,891 responded with an errorlast probe · 5xx / 404 / 429 / 403

hackthebox.com

Observed 2026-07-13T18:02:55.220Z (9h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Registered withAmazon Registrar, Inc.
Also uses1PasswordFacebook/MetaSlackFigmaAtlassianGoogle Search Console
11 subdomains · cybersecurity_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat hackthebox.com actually stands on - every host below is a signed observation
hackthebox.com
A / AAAA
109.176.239.70109.176.239.69
Cloudflareserves the site
NS
jill.ns.cloudflare.comcody.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
alt1.aspmx.l.google.comalt3.aspmx.l.google.comalt2.aspmx.l.google.comalt4.aspmx.l.google.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 302 → https://www.hackthebox.com/
HTTP status302
Servercloudflare
TLS protocolHTTP/3
TLS issuernot observed
Behind Cloudflareyes
Response time24 ms
DNS resolutionNOERROR
Redirect chain
https://www.hackthebox.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 109.176.239.70
  • 109.176.239.69

MX 5

  • 5alt1.aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com
  • 1aspmx.l.google.com

TXT 17

  • atlassian-sending-domain-verification=469d03af-e04b-4609-a67a-0c4161077605
  • 1password-site-verification=4ZZGMSMKHBCCTHWRCUW5TEFLCA
  • brevo-code:293be74b395c496ce75d12a22ce91aee
  • apple-domain-verification=nJdetwYEnUhgLT8W
  • facebook-domain-verification=2ic10ka7c5jbl7ou7nva60919jn15w
  • v=spf1 include:_u.hackthebox.com._spf.smart.ondmarc.com ~all
  • slack-domain-verification=XJrLipfXUDw7kCGV5rK68GS1d92cVqE51H4UZ6fP
  • figma-domain-verification=d1cdada4c1c15f86d6b7cc65fbd95c5e34502a4c8bb6950368a680433f521c02-1763047074
  • atlassian-domain-verification=BOEsvQIaiNXegte2TKsFBSjaCETV5f2f7rvcTiirvI/v9l56nU97DGOQfJIXWJJN
  • google-site-verification=p8Ke_ETLIL22PW1uxiNOfE_-hLZ2LQd9KmdQS9bARa8

NS 2

  • jill.ns.cloudflare.com
  • cody.ns.cloudflare.com

SOA 1

  • cody.ns.cloudflare.com sysops.hackthebox.eu

TLS Certificates (0)

None.

Subdomains (11)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for hackthebox.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for hackthebox.com <a href="https://domaindrift.io/t/hackthebox.com"> <img src="https://domaindrift.io/badge/hackthebox.com.svg" width="300" height="64" alt="DomainDrift signed observations for hackthebox.com"> </a>

Ed25519 Receipt

Receipt ID
a37e0df9-c993-4cd8-9d92-324c73dfc090
Output Hash
67b7ed61a47399230b18c1562aba34cad8c8936e605fd82040af16422cad14cb
Signature
ed25519:91343fe52c7dfbd682e001941c3a1da03b6e0e90efbcff76593620924f17b6809b61858956cb84cdff75a9db8490afea5c3888bd53473c4a5ba834e20d019b0a
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser