CONTINUOUS INTERNET TELEMETRY24H DRIFT3,003 material changesacross 2,751 domains · +2,094 vs yesterdayDNS DRIFT193 domains changed DNS providertop destination parity.domains · +167 vs yesterdayEMAIL DRIFT38 domains switched email providertop destination google.com · +30 vs yesterdayCERT DRIFT74 domains switched issuing CA24h · +51 vs yesterdayNOW2,361 curated domains not answering-349 vs yesterdayERRORS22,865 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED91,146 throttled or blocked our scanner429 rate-limit / 403 bot-block

tunnelbear.com

Observed Jul 21, 2026, 19:40 UTC (9h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Secured bySectigo
Registered withTucows Domains Inc.
Also usesGoogle Search ConsoleStripeAtlassian
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat tunnelbear.com actually stands on - every host below is a signed observation
tunnelbear.com
A / AAAA
104.17.155.236104.17.154.236
Cloudflareserves the site
NS
may.ns.cloudflare.comtheo.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
tunnelbear-com.mail.protection.outlook.com
Microsoft 365receives its email
TLS
*.tunnelbear.com
Sectigo Limitedissued its certificate

DNS Records

A 2

  • 104.17.155.236
  • 104.17.154.236

MX 1

  • 0tunnelbear-com.mail.protection.outlook.com

TXT 9

  • MS=ms89118260
  • configcat-domain-verification=08dddfeb-0222-4e11-8448-fd10dc3858b8
  • google-site-verification=8KK0ArPmx5iqGML5QZFaQai-9oaUZONUbGru7_o_OjY
  • google-site-verification=K8wsXL5V8bgH5GfNwFgnyjiVpBC5TT_d6lGkJ2LrKkU
  • google-site-verification=sUNMDHMkA2_Wb1OznpzFZ4mFArWjUvlx0M_bBSV489Q
  • stripe-verification=48DA25A69AD3767A634F45831E4C418250E68AC0751476BC99ECCEF5981EB3B3
  • v=spf1 include:mailgun.org include:_spf.google.com include:spf.protection.outlook.com -all
  • atlassian-domain-verification=g24UbjATAVr9Vt3V7xBXVIeHVyPJnAB+hn0w9OrXWB/NFIZ/GW0s4t0pStndBrRK
  • v=DMARC1; p=none; pct=100; rua=mailto:re+rzjzszgwqjs@dmarc.postmarkapp.com; sp=none; aspf=r;

NS 2

  • may.ns.cloudflare.com
  • theo.ns.cloudflare.com

SOA 1

  • may.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (4)

Common NameIssuerExpires
*.tunnelbear.com C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 Sat, 02 Jan 2027 23:59:59 +0000
Sectigo Public Server Authentication CA DV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000
USERTrust RSA Certification Authority C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Sun, 31 Dec 2028 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for tunnelbear.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for tunnelbear.com <a href="https://domaindrift.io/t/tunnelbear.com"> <img src="https://domaindrift.io/badge/tunnelbear.com.svg" width="300" height="64" alt="DomainDrift signed observations for tunnelbear.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_5073733c5de30cea
Output Hash
83a045abffeacd06b6e329b3b89ae7a0621c6f31dbd05f430f5c0e97dc4c68cb
Signature
ed25519:16c5456f0fd215381443c8f172e027dd82cec1c397699687213e4d887d1749d13caddd1a564eda357d3324ee675b17fae63f090c375a085d232bc797bceeef05
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser