threatgrid.com

Observed 2026-07-12T12:22:24.218Z (19h ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding

Runs onCloudflare

Email byGoogle Workspace

Registered withAmazon Registrar, Inc.

8 subdomains · tranco_40k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat threatgrid.com actually stands on - every host below is a signed observation

threatgrid.com

A / AAAA

63.97.201.67

Cloudflareserves the site

ns-392.awsdns-49.comns-1081.awsdns-07.orgns-647.awsdns-16.netns-1565.awsdns-03.co.uk

awsdns-49.com + awsdns-07.org + moreanswers its DNS

aspmx3.googlemail.comthreatgrid.com.s9a1.psmtp.comthreatgrid.com.s9b1.psmtp.comalt1.aspmx.l.google.com+5 more

Google Workspacereceives its email

HTTPS probe

server_error Server error (5xx) 526 Server Error

HTTP status526

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time151 ms

DNS resolutionNOERROR

MCP This domain advertises an AI service endpoint at _mcp._tcp.

v=spf1 a mx include:spf.mtasv.net ~all

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

63.97.201.67

MX 9

10aspmx3.googlemail.com
10threatgrid.com.s9a1.psmtp.com
30threatgrid.com.s9b1.psmtp.com
5alt1.aspmx.l.google.com
10aspmx2.googlemail.com
20threatgrid.com.s9a2.psmtp.com
5alt2.aspmx.l.google.com
40threatgrid.com.s9b2.psmtp.com
1aspmx.l.google.com

TXT 4

identrust_validate=L0cdlttzbMd0mHkiqVdqIqhBplEfk5r9m49nmPqdvsEd
v=DMARC1; p=none;
v=DKIM1; (detected)
v=spf1 a mx include:spf.mtasv.net ~all

NS 4

ns-392.awsdns-49.com
ns-1081.awsdns-07.org
ns-647.awsdns-16.net
ns-1565.awsdns-03.co.uk

SOA 1

ns-392.awsdns-49.com awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for threatgrid.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/threatgrid.com">
  <img src="https://domaindrift.io/badge/threatgrid.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for threatgrid.com">
</a>

Ed25519 Receipt

Receipt ID: 06956e1e-6819-4b7b-b85c-9ab7df44951c
Output Hash: c9c54de6f570b7251d22b431833c9913def75e852605ead9a065058b18737073
Signature: ed25519:391dccb20b93d2091b0a5f691dff2cdd217793ff6789481292343b821e8cab5c570b0cdc0ad6225566d9539082d84ec9ff6668f1083c978978fd8bb63c295002
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/threatgrid.com