kroll.com

Observed 2026-07-12T18:31:08.561Z (16h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byMimecast

Registered withMarkMonitor Inc.

Also usesSlackMiroGoogle Search ConsoleDockerFacebook/MetaZoomAtlassianDocuSign

IPv6 · consulting

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat kroll.com actually stands on - every host below is a signed observation

kroll.com

A / AAAA

104.18.43.137172.64.144.1192a06:98c1:310b::ac40:90772606:4700:4409::6812:2b89

Cloudflareserves the site

sara.ns.cloudflare.comburt.ns.cloudflare.com

cloudflare.comanswers its DNS

usb-smtp-inbound-1.mimecast.comusb-smtp-inbound-2.mimecast.com

Mimecastreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.kroll.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time329 ms

DNS resolutionNOERROR

Redirect chain

https://www.kroll.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

104.18.43.137
172.64.144.119

AAAA 2

2a06:98c1:310b::ac40:9077
2606:4700:4409::6812:2b89

MX 2

10usb-smtp-inbound-1.mimecast.com
10usb-smtp-inbound-2.mimecast.com

TXT 39

apple-domain-verification=35PJg7aMVAUfcbzH
D0U0F62301
v=spf1 include:usb._netblocks.mimecast.com include:spf_apps.kroll.com include:aspmx.pardot.com include:mail.zendesk.com include:spf_c.oraclecloud.com -all
bw=kpVdAmkP5BStJ620ZNunZEPK37nBzc2qjtS9AGkVO2/e
slack-domain-verification=3vRPtRSoBudffjBBqMYcOgQCH6OkHWsJMhwazoku
sitecore-domain-verification=87e8004dbcb94583bd96abca7900a0a6
d80f17683gf6gvhtnns2906bvjbglrz8
pardot_37972_*=e3d2fb4f0351caab770836572384cb845a6bb0149e5555f59bb719f0176de5d8
magic-patterns-domain-verification-5eyj6g=m2iDzgmXwfGZmjUBPQcVICksX
MS=ms22473095

NS 2

sara.ns.cloudflare.com
burt.ns.cloudflare.com

SOA 1

burt.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (13)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for kroll.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/kroll.com">
  <img src="https://domaindrift.io/badge/kroll.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for kroll.com">
</a>

Ed25519 Receipt

Receipt ID: 9ca8be03-39ca-4fe7-8994-940eea17e8d2
Output Hash: 56f5712c4fe715da1bdd47d61dab67053066f605738bf5f240b1c970de5b0b30
Signature: ed25519:d70b315496dc0c067fb1559d7a16a18ffe65d93f78aecd2fce8b527643bc8d0bf38906704997c589947b5238f8957dfddd4a9aaace8e1d2ac248100459528e0c
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/kroll.com