CONTINUOUS INTERNET TELEMETRY24H DRIFT1,597 material changesacross 1,394 domains · +175 vs yesterdayDNS DRIFT11 domains changed DNS providertop destination parity.domains · -10 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination pphosted.comNOW727 curated domains not answeringlast probe, steadyERRORS3,199 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,906 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,597 material changesacross 1,394 domains · +175 vs yesterdayDNS DRIFT11 domains changed DNS providertop destination parity.domains · -10 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination pphosted.comNOW727 curated domains not answeringlast probe, steadyERRORS3,199 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,906 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

brightcloud.com

Observed 2026-07-17T13:01:49.546293347+00:00 (15h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Email byProofpoint
Secured byAmazon
Registered withSafeNames Ltd.
tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat brightcloud.com actually stands on - every host below is a signed observation
brightcloud.com
A / AAAA
52.42.149.1452.35.20.10335.164.59.201
unattributedserves the site
NS
ns1.brightcloud.comns0.brightcloud.comns3.brightcloud.comns2.brightcloud.com+1 more
brightcloud.comanswers its DNS
MX
mxa-00102601.gslb.pphosted.commxb-00102601.gslb.pphosted.com
Proofpointreceives its email
TLS
brightcloud.com
Amazonissued its certificate

DNS Records

A 3

  • 52.42.149.14
  • 52.35.20.103
  • 35.164.59.201

MX 2

  • 10mxa-00102601.gslb.pphosted.com
  • 10mxb-00102601.gslb.pphosted.com

TXT 4

  • v=spf1 include:spf.protection.outlook.com include:_spf.google.com include:amazonses.com ip4:52.13.76.100 -all
  • MS=ms27065026
  • e8c7503e7572495cb0972f058589a016
  • v=DMARC1; p=reject; sp=none; pct=100; ri=86400; rua=mailto:info@brightcloud.com

NS 5

  • ns1.brightcloud.com
  • ns0.brightcloud.com
  • ns3.brightcloud.com
  • ns2.brightcloud.com
  • ns4.brightcloud.com

SOA 1

  • ns10.digicertdns.com dns.digicertdns.com

TLS Certificates (3)

Common NameIssuerExpires
brightcloud.com C=US, O=Amazon, CN=Amazon RSA 2048 M04 Sun, 08 Nov 2026 23:59:59 +0000
Amazon RSA 2048 M04 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:26:35 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for brightcloud.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for brightcloud.com <a href="https://domaindrift.io/t/brightcloud.com"> <img src="https://domaindrift.io/badge/brightcloud.com.svg" width="300" height="64" alt="DomainDrift signed observations for brightcloud.com"> </a>

Ed25519 Receipt

Receipt ID
4d71d81b-32dc-42b6-83b2-c71594636bcb
Output Hash
77bcb5cb456258eb371571e117383b3e43684d8835cb6304fed69ac89a17da2b
Signature
ed25519:54ebabaf8bc1f617a5a13845d9affffc04e08848db531b105f458c02177b397b49d20419e06ce7d0e867940d37375fc7bb8efe4b7b5cbd95fdbdf863b8ce1101
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser