CONTINUOUS INTERNET TELEMETRY24H DRIFT3,088 material changesacross 2,775 domains · -310 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination cloudflare.com · -4 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,310 curated domains not answering-6,408 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,088 material changesacross 2,775 domains · -310 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination cloudflare.com · -4 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,310 curated domains not answering-6,408 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 403

orca.security

Observed 2026-07-13T00:01:58.620570316+00:00 (14h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Secured bySectigo
Also usesZoomAtlassianDockerDocuSignGoogle Search ConsoleMiroSlack
IPv6 · 1 subdomain · security
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat orca.security actually stands on - every host below is a signed observation
orca.security
A / AAAA
104.20.25.25172.66.153.1612606:4700:10::6814:19192606:4700:10::ac42:99a1
Cloudflareserves the site
NS
brett.ns.cloudflare.commargaret.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
ASPMX.L.GOOGLE.COMASPMX2.GOOGLEMAIL.COMASPMX3.GOOGLEMAIL.COMASPMX2.GOOGLEMAIL.COM+5 more
Google Workspacereceives its email
TLS
orca.security
Sectigo Limitedissued its certificate

DNS Records

A 2

  • 104.20.25.25
  • 172.66.153.161

AAAA 2

  • 2606:4700:10::6814:1919
  • 2606:4700:10::ac42:99a1

MX 9

  • 1ASPMX.L.GOOGLE.COM
  • 10ASPMX2.GOOGLEMAIL.COM
  • 10ASPMX3.GOOGLEMAIL.COM
  • 10ASPMX2.GOOGLEMAIL.COM
  • 10ASPMX3.GOOGLEMAIL.COM
  • 5ALT1.ASPMX.L.GOOGLE.COM
  • 5ALT2.ASPMX.L.GOOGLE.COM
  • 5ALT1.ASPMX.L.GOOGLE.COM
  • 5ALT2.ASPMX.L.GOOGLE.COM

TXT 41

  • DO NOT USE: v=spf1 include:_spf.google.com include:_spf.salesforce.com include:amazonses.com include:mktomail.com include:et._spf.pardot.com ~all
  • DirectFedAuthUrl=https://accounts.google.com/o/saml2/idp?idpid=C00xu10p0
  • MS=ms75782451
  • MS=ms93365294
  • Probely=d28c96c4-3061-4f06-bd11-1f93573fd708
  • ZOOM_verify_T21dlrhH9yIjyIr7qtuGyq
  • ZOOM_verify_uzM7oApAND5H8r1HljXzYT
  • a4bmegv4uc6nlhdlki65h6s4aj
  • adobe-idp-site-verification=35b47060baa30d2e825867a0de58e58e987d19fec0a0ae4bebb0bef88012a335
  • amazonses:L7yL8ayzVveVU8P8mKTtj/FtOwjY3YjDSqCrzgcIiPc=

NS 2

  • brett.ns.cloudflare.com
  • margaret.ns.cloudflare.com

SOA 1

  • brett.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (4)

Common NameIssuerExpires
orca.security C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA EV R36 Tue, 18 Aug 2026 23:59:59 +0000
Sectigo Public Server Authentication CA EV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000
USERTrust RSA Certification Authority C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Sun, 31 Dec 2028 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for orca.security. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for orca.security <a href="https://domaindrift.io/t/orca.security"> <img src="https://domaindrift.io/badge/orca.security.svg" width="300" height="64" alt="DomainDrift signed observations for orca.security"> </a>

Ed25519 Receipt

Receipt ID
ba92f570-2469-44d1-a988-615869cbfadb
Output Hash
ec84324ecdd838234dd792ca2971bc41d49d2aed01482c88cb75edf14bba916f
Signature
ed25519:53fc7d0b9a0ec165589a882820349a2e2b866da114694595b62d060d86b3e0c356aba0c478e7d25d2637ea02651b1bd1f80cba33cce86c71199bc15013e72e03
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser