CONTINUOUS INTERNET TELEMETRY24H DRIFT2,034 material changesacross 1,521 domains · last 24h · +118 vs yesterdayDNS DRIFT30 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT6 domains switched issuing CA24hNOW476 curated domains not reachablelast probe, steadySITE ERRORS20,143 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 110,546 sites429 rate-limit / 403 bot-block, a posture signal

cirrus.com

Observed Jul 24, 2026, 17:47 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Guarded by a firewall
Runs onAmazon
Email byProofpoint
Secured byDigiCert
Also usesAtlassianDockerDocuSignGoogle Search ConsoleMiro
3 subdomains · aerospace
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat cirrus.com actually stands on - every host below is a signed observation
cirrus.com
A / AAAA
3.167.56.293.167.56.923.167.56.1083.167.56.74
Amazonserves the site
NS
ns-1288.awsdns-33.orgns-1755.awsdns-27.co.ukns-342.awsdns-42.comns-680.awsdns-21.net
awsdns-33.org + awsdns-27.co.uk + moreanswers its DNS
MX
mxa-001ae601.gslb.pphosted.commxb-001ae601.gslb.pphosted.com
Proofpointreceives its email
TLS
cirrus.com
DigiCert Incissued its certificate

DNS Records

A 4

  • 3.167.56.29
  • 3.167.56.92
  • 3.167.56.108
  • 3.167.56.74

MX 2

  • 10mxa-001ae601.gslb.pphosted.com
  • 10mxb-001ae601.gslb.pphosted.com

TXT 23

  • BGXHKuF8mZNsKBq5ly+ywRJRhZ9V/0A1uYXIIPTfBGrAwZzAay8FF382fwp+PQ4rSNRrj4kWxO1nEbMS41pJzg==
  • TDsS0s+dsk9iJPq2a/R66YmPJx1Mx+yaCd0HU1HS+g7Y5psaSYC+Ek6lHl4OmJqR/deLFbNbLe4vUyZOtTUTcQ==
  • _n7nn8jsjc9epm7yd63mt6tqp5swdbkg
  • a0354ac5-b260-494c-9175-23f48f123e76
  • adobe-idp-site-verification=a0b24157-1ed6-47da-8c17-deb73b8cc527
  • anthropic-domain-verification-6f94yc=mpThStuIBgOUJBQQmxGxyOpyn
  • apple-domain-verification=jbwIuFiz7X5x4L8l
  • atlassian-domain-verification=3ixdDTSrm5jeWwNDf9dgOhtjdU4lR1W63y39v4yeWa4TSmBy166T8hehnEWAkCxD
  • bw=Eq6kdj94pXgfMXI9rEXrs67zbkCbSKiSnawiK9b1TxLq
  • canva-site-verification=bUufd5FqPilUx5n59-nmtQ

NS 4

  • ns-1288.awsdns-33.org
  • ns-1755.awsdns-27.co.uk
  • ns-342.awsdns-42.com
  • ns-680.awsdns-21.net

SOA 1

  • ns-1288.awsdns-33.org awsdns-hostmaster.amazon.com

SRV 2

  • xmpp1.cirrus.com:5269 p0
  • autodiscover.cirrus.com:443 p10

TLS Certificates (2)

Common NameIssuerExpires
cirrus.com C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 Fri, 12 Mar 2027 23:59:59 +0000
DigiCert Global G2 TLS RSA SHA256 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Sat, 29 Mar 2031 23:59:59 +0000

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cirrus.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for cirrus.com <a href="https://domaindrift.io/t/cirrus.com"> <img src="https://domaindrift.io/badge/cirrus.com.svg" width="300" height="64" alt="DomainDrift signed observations for cirrus.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_4a8bbec737103d34
Output Hash
603473431aede9e8e90a05638efe3854f9cc0c1d830640f770bdfa0f05f32f20
Signature
ed25519:f4c88813c50508b6b0f25d523ca781c005e01fbfa314a01a953b6176ca0eabaa699055e2180e981cc380bbf97d693977afe808212bf778c568875d793167ed0e
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser