threatconnect.com

Observed Jul 21, 2026, 19:16 UTC (22h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onCloudflare

Email byGoogle Workspace

Secured byAmazon

Registered withAmazon Registrar, Inc.

Also usesZoomAtlassianDocuSignFigmaGoogle Search ConsoleMiroSlack

IPv6 · 1 subdomain · cybersecurity_expanded

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat threatconnect.com actually stands on - every host below is a signed observation

threatconnect.com

A / AAAA

18.154.227.10618.154.227.4818.154.227.1418.154.227.7+8 more

Cloudflareserves the site

ns-1265.awsdns-30.orgns-1606.awsdns-08.co.ukns-800.awsdns-36.netns-96.awsdns-12.com

awsdns-30.org + awsdns-08.co.uk + moreanswers its DNS

aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.com+1 more

Google Workspacereceives its email

TLS

threatconnect.com

Amazonissued its certificate

DNS Records

A 4

18.154.227.106
18.154.227.48
18.154.227.14
18.154.227.7

AAAA 8

2600:9000:2501:c00:c:6d0a:6840:93a1
2600:9000:2501:4a00:c:6d0a:6840:93a1
2600:9000:2501:6e00:c:6d0a:6840:93a1
2600:9000:2501:9800:c:6d0a:6840:93a1
2600:9000:2501:1200:c:6d0a:6840:93a1
2600:9000:2501:4600:c:6d0a:6840:93a1
2600:9000:2501:aa00:c:6d0a:6840:93a1
2600:9000:2501:c400:c:6d0a:6840:93a1

MX 5

10aspmx.l.google.com
20alt1.aspmx.l.google.com
30alt2.aspmx.l.google.com
40aspmx2.googlemail.com
50aspmx3.googlemail.com

TXT 19

ZOOM_verify_gaECl9WbGc4IjFl8yAxM1G
airtable-verification=61fa315179034ad4124c54540eb1b757
anthropic-domain-verification-cg32q1=ojokRxWJ1SDB1EUBKa8uQx7y9
apple-domain-verification=ozhaS3QzCuPT9S6M
atlassian-domain-verification=2ootmzq6ZlqLfm6af00vlFjAecwxaBDsa+uLHujn3QpukHC/idU6sF4tqpZFh5/7
atlassian-domain-verification=KUMGURFvb3Pks3CD8QqAKVkq0P2oeZBZYrtYtEuHh3WWh3PxjThaHUb1U5LH9D13
atlassian-domain-verification=us1h42yiaNTPuV1UKUaXtzn442axyeiQjfQkL5uX1KvdOKMLkkVZogWAg1cB8yWh
cisco-ci-domain-verification=3ba8c358eb546cef983b43e286e4937e0462e83408132c2c6b5a260b2734da1e
docusign=4ba14e59-4033-4e2b-9db4-3a0b4f10f1e7
dropbox-domain-verification=itji4ree0hol

NS 4

ns-1265.awsdns-30.org
ns-1606.awsdns-08.co.uk
ns-800.awsdns-36.net
ns-96.awsdns-12.com

SOA 1

ns-96.awsdns-12.com awsdns-hostmaster.amazon.com

CAA 3

issue "amazon.com"
issue "digicert.com"
issue "letsencrypt.org"

TLS Certificates (3)

Common Name	Issuer	Expires
`threatconnect.com`	C=US, O=Amazon, CN=Amazon RSA 2048 M04	Wed, 30 Dec 2026 23:59:59 +0000
`Amazon RSA 2048 M04`	C=US, O=Amazon, CN=Amazon Root CA 1	Fri, 23 Aug 2030 22:26:35 +0000
`Amazon Root CA 1`	C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2	Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (1)

www.threatconnect.com

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for threatconnect.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/threatconnect.com">
  <img src="https://domaindrift.io/badge/threatconnect.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for threatconnect.com">
</a>

Ed25519 Receipt

Receipt ID: rcpt_535d8c7f95df875b
Output Hash: 5da0c94ae9698afcb5ff49cc671df3d38c55648fe7900a8a78f1488d07ad609e
Signature: ed25519:2949d305440f30ed44b641ef6a148bf41977e3d3dc4ea11f45bcf3864ef8760c66364a21fa718011a28283ba73478bdf17e735143a7b9956008c366371888300
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/threatconnect.com