CONTINUOUS INTERNET TELEMETRY24H DRIFT964 material changesacross 878 domains · -672 vs yesterdayDNS DRIFT9 domains changed DNS providertop destination commonmx.com · -8 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination privateemail.com · -4 vs yesterdayNOW35,882 curated domains not answering+21,459 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT964 material changesacross 878 domains · -672 vs yesterdayDNS DRIFT9 domains changed DNS providertop destination commonmx.com · -8 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination privateemail.com · -4 vs yesterdayNOW35,882 curated domains not answering+21,459 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block

kira.com

Observed 2026-07-15T10:55:28.830Z (22h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Also usesZoom
IPv6 · 1 subdomain · legal_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat kira.com actually stands on - every host below is a signed observation
kira.com
A / AAAA
23.185.0.22620:12a:8001::22620:12a:8000::2
Cloudflareserves the site
NS
ns52.domaincontrol.comns51.domaincontrol.com
domaincontrol.comanswers its DNS
MX
thtbc-com.mail.protection.outlook.comthtbc-com.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://thtbc.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time64 ms
DNS resolutionNOERROR
Redirect chain
https://thtbc.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 23.185.0.2

AAAA 2

  • 2620:12a:8001::2
  • 2620:12a:8000::2

MX 2

  • 10thtbc-com.mail.protection.outlook.com
  • 15thtbc-com.mail.protection.outlook.com

TXT 7

  • WLV4S0FINfyadYV7HUvNQZYeD00qJ7Ih28kY7RJeE/PRyg9cFnKToPw5z+QAfSuamSQXfD1OYZVlO63a6GYs5w==
  • ZOOM_verify_jEA6JvIcQg-EO84Id8Ud4A
  • adobe-idp-site-verification=6da4f76c56bcc414d73e3f66f6e418009459cdc7cc27ff092e2777c036e72487
  • ppe-78ab57b4c2fc695e2afa165c752836d0c1f2ffac
  • MS=ms75746207
  • v=spf1 include:spfa.cpmails.com ip4:64.111.19.242 ip4:92.62.175.28 ip4:196.62.175.24 ip4:196.62.175.28 ip4:150.238.95.110 ip4:34.195.167.125 ip4:54.205.243.38 include:spf.protection.outlook.com ~all
  • v=DMARC1; p=quarantine; fo=1:d:s; rua=mailto:dmarc_agg@vali.email;

NS 2

  • ns52.domaincontrol.com
  • ns51.domaincontrol.com

SOA 1

  • ns51.domaincontrol.com dns.jomax.net

TLS Certificates (0)

None.

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for kira.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for kira.com <a href="https://domaindrift.io/t/kira.com"> <img src="https://domaindrift.io/badge/kira.com.svg" width="300" height="64" alt="DomainDrift signed observations for kira.com"> </a>

Ed25519 Receipt

Receipt ID
08c816fc-fdc3-4fb8-8a60-21bd4826195a
Output Hash
469794d4448fe5560f85739139edbed925c7feae0877e2ebd8859dada6c3228e
Signature
ed25519:2e837e6e1d1194d45d2ca75fc2818662beea385df8e59095ebb8394e140f80c52fe8fbf9cd0447d0b40e2300c3d6492ef0fe71882ae39716c8f43de95a16a608
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser