CONTINUOUS INTERNET TELEMETRY24H DRIFT3,060 material changesacross 2,780 domains · -338 vs yesterdayDNS DRIFT19 domains changed DNS providertop destination cloudflare.com · -8 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT6 domains switched issuing CA24h · -1 vs yesterdayNOW3,324 curated domains not answering-6,394 vs yesterdayERRORS10,922 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,060 material changesacross 2,780 domains · -338 vs yesterdayDNS DRIFT19 domains changed DNS providertop destination cloudflare.com · -8 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT6 domains switched issuing CA24h · -1 vs yesterdayNOW3,324 curated domains not answering-6,394 vs yesterdayERRORS10,922 responded with an errorlast probe · 5xx / 404 / 429 / 403

cribl.cloud

Observed 2026-07-12T22:00:56.121Z (22h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Also usesGoogle Search Console
IPv6 · 9 subdomains · tranco_10k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat cribl.cloud actually stands on - every host below is a signed observation
cribl.cloud
A / AAAA
99.84.41.12099.84.41.2999.84.41.8299.84.41.110+8 more
Cloudflareserves the site
NS
ns-1860.awsdns-40.co.ukns-1299.awsdns-34.orgns-583.awsdns-08.netns-23.awsdns-02.com
awsdns-40.co.uk + awsdns-34.org + moreanswers its DNS

HTTPS probe

redirect Redirecting (3xx) 308 → https://manage.cribl.cloud
HTTP status308
Servercloudflare
TLS protocolHTTP/3
TLS issuernot observed
Behind Cloudflareyes
Response time79 ms
DNS resolutionNOERROR
Redirect chain
https://manage.cribl.cloud

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 4

  • 99.84.41.120
  • 99.84.41.29
  • 99.84.41.82
  • 99.84.41.110

AAAA 8

  • 2600:9000:2120:1800:8:742c:d1c0:93a1
  • 2600:9000:2120:a400:8:742c:d1c0:93a1
  • 2600:9000:2120:b400:8:742c:d1c0:93a1
  • 2600:9000:2120:3c00:8:742c:d1c0:93a1
  • 2600:9000:2120:a200:8:742c:d1c0:93a1
  • 2600:9000:2120:9400:8:742c:d1c0:93a1
  • 2600:9000:2120:c000:8:742c:d1c0:93a1
  • 2600:9000:2120:a000:8:742c:d1c0:93a1

TXT 6

  • google-site-verification=kLGGejELs6s71ud-0RKPBNHJBQEyxtBz6ZZ-7Y39Tzs
  • google-site-verification=DlPGVoHOfkvIdBWojj8dh5SBkLICmIXSXOe1Oy-bt-g
  • google-site-verification=WRpbPj8_NRujJEgIzTAxAMKqF7f2uMyN3igpDECxWBk
  • adobe-idp-site-verification=7fcf086bf1ffb1d418428318f83514ecad7e97ed5278938dd6e9029a46ca8978
  • v=spf1 include:_spf.cribl_cloud._d.easydmarc.pro ~all
  • v=DNSSEC1; (detected)

NS 4

  • ns-1860.awsdns-40.co.uk
  • ns-1299.awsdns-34.org
  • ns-583.awsdns-08.net
  • ns-23.awsdns-02.com

SOA 1

  • ns-23.awsdns-02.com awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (9)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cribl.cloud. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for cribl.cloud <a href="https://domaindrift.io/t/cribl.cloud"> <img src="https://domaindrift.io/badge/cribl.cloud.svg" width="300" height="64" alt="DomainDrift signed observations for cribl.cloud"> </a>

Ed25519 Receipt

Receipt ID
4a881542-d327-4cfb-96a4-540ae1aaa71c
Output Hash
b390956952c0641a551e9cdf63c196506117b200a7144042e762970186fc1112
Signature
ed25519:8ad170d06a0b040720c97cf38e26519f5bfdb11894d06472a16f1a142af0632fa18c0d7cea531e6e1604b30ff047261c737e95fd5d61197ff669a9dbb7d6f305
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser