CONTINUOUS INTERNET TELEMETRY24H DRIFT1,986 material changesacross 1,792 domains · +27 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination parity.domains · +3 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · +2 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW3,470 curated domains not answeringlast probe, steadyERRORS8,532 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,986 material changesacross 1,792 domains · +27 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination parity.domains · +3 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · +2 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW3,470 curated domains not answeringlast probe, steadyERRORS8,532 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block

umbrella.com

Observed 2026-07-15T01:31:28.971Z (10h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Registered withPDR Ltd. d/b/a PublicDomainRegistry.com
Also usesGoogle Search Console
12 subdomains · cybersecurity_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat umbrella.com actually stands on - every host below is a signed observation
umbrella.com
A / AAAA
67.215.70.200
Cloudflareserves the site
NS
auth3.opendns.comauth1.opendns.comauth2.opendns.com
opendns.comanswers its DNS
MX
ASPMX3.GOOGLEMAIL.comASPMX2.GOOGLEMAIL.comASPMX.L.GOOGLE.comALT1.ASPMX.L.GOOGLE.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://umbrella.cisco.com
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time24 ms
DNS resolutionNOERROR
Redirect chain
https://umbrella.cisco.com

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 67.215.70.200

MX 5

  • 30ASPMX3.GOOGLEMAIL.com
  • 30ASPMX2.GOOGLEMAIL.com
  • 10ASPMX.L.GOOGLE.com
  • 20ALT1.ASPMX.L.GOOGLE.com
  • 20ALT2.ASPMX.L.GOOGLE.com

TXT 9

  • identrust_validate=OposiSpcTDwPLefBUEJyAJP8m3xBr8OfPcslmIDmj7DR
  • v=spf1 -all
  • identrust_validate=UiBF9Ox1vDa3uJmF2sIarmne+fzUgSh9ajrO3RyyGPaq
  • _3u3rfl29hcdbo1b7rbl05zsgjo7mfj9
  • google-site-verification=0imT49JhH4gh9MNXxnGcCC-ZwNkuQ8rP1BkdTMEV_UY
  • Ao7lF2JIQb4mRR0wSBUZEI3Ubg
  • adobe-idp-site-verification=b35d54b9d9328dffa8c91f4d19b17ee8935ad8cf86aed72d168a472f6c250233
  • google-site-verification=PARxcI0BVhSZSwU8f519xoO9On7gfgcCpV3Zgi2kznE
  • v=DMARC1; p=none; rua=mailto:hostmaster@opendns.com

NS 3

  • auth3.opendns.com
  • auth1.opendns.com
  • auth2.opendns.com

SOA 1

  • auth1.opendns.com hostmaster.opendns.com

CAA 8

  • issue identrust.com
  • issue letsencrypt.org
  • issue amazonaws.com
  • issue awstrust.com
  • issue amazon.com
  • issue quovadisglobal.com
  • issue digicert.com
  • issue amazontrust.com

TLS Certificates (0)

None.

Subdomains (12)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for umbrella.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for umbrella.com <a href="https://domaindrift.io/t/umbrella.com"> <img src="https://domaindrift.io/badge/umbrella.com.svg" width="300" height="64" alt="DomainDrift signed observations for umbrella.com"> </a>

Ed25519 Receipt

Receipt ID
27e1fd32-0235-4166-a2fb-8ebaab5857ad
Output Hash
577b2e80ae2485c657b37ea6d290cc5b614fc50a0f14f9bb97c5eed9df61dedf
Signature
ed25519:59415d583d36952ab4a3c91ba758452b5feb91a5b80b75904bdf9971469c3e6cdfeb1bba2082499cfc8bd23092092e74cbcb6a4a2d8c6fd3c76049a9d47cb00f
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser