CONTINUOUS INTERNET TELEMETRY24H DRIFT5,508 material changesacross 5,060 domains · last 24h · -4,907 vs yesterdayDNS DRIFT330 domains changed DNS providertop destination cloudflare.com · -329 vs yesterdayEMAIL DRIFT70 domains switched email providertop destination google.com · -97 vs yesterdayCERT DRIFT107 domains switched issuing CA24h · -112 vs yesterdayNOW479 curated domains not reachable-224 vs yesterdaySITE ERRORS17,321 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,589 sites429 rate-limit / 403 bot-block, a posture signal

crowdsec.net

Observed Jul 24, 2026, 03:11 UTC (9h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onAmazon
Email byGoogle Workspace
Secured byLet's Encrypt
Registered withGandi SAS
Also usesGoogle Search ConsoleStripe
tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat crowdsec.net actually stands on - every host below is a signed observation
crowdsec.net
A / AAAA
76.76.21.21
Amazonserves the site
NS
ns-33-c.gandi.netns-59-b.gandi.netns-220-a.gandi.net
gandi.netanswers its DNS
MX
aspmx.l.google.comaspmx3.googlemail.comaspmx2.googlemail.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
crowdsec.net
Let's Encryptissued its certificate

DNS Records

A 1

  • 76.76.21.21

MX 5

  • 1aspmx.l.google.com
  • 10aspmx3.googlemail.com
  • 10aspmx2.googlemail.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 9

  • google-site-verification=xMnVwfctoRCV-9kZrXy2NIFrtN3NIvG5kvAP8tmUmnU
  • stripe-verification=8d18e560f80b6d84ba67c411eb197caf2df4d2222e672e2bc0d6318dc9d45978
  • mongodb-site-verification=nZPPNSRVbwGMKGdZuJOEr4PzVp08dHBj
  • google-site-verification=Kc8q-_RGkcJ9XsQmZJ-EcTmfefe45257MHbw-irRzfs
  • v=spf1 include:_spf.google.com ~all
  • proxy-ssl.webflow.com
  • google-site-verification=N96Fk3cSd616a1w5DT56mUp2v0HkcjQaMJA1i84KRtE
  • MS=ms37947268
  • v=DMARC1; p=none; rua=mailto:dmarc-reports@crowdsec.net

NS 3

  • ns-33-c.gandi.net
  • ns-59-b.gandi.net
  • ns-220-a.gandi.net

SOA 1

  • ns1.gandi.net hostmaster.gandi.net

TLS Certificates (3)

Common NameIssuerExpires
crowdsec.net C=US, O=Let's Encrypt, CN=YR2 Sun, 30 Aug 2026 04:33:09 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for crowdsec.net. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for crowdsec.net <a href="https://domaindrift.io/t/crowdsec.net"> <img src="https://domaindrift.io/badge/crowdsec.net.svg" width="300" height="64" alt="DomainDrift signed observations for crowdsec.net"> </a>

Ed25519 Receipt

Receipt ID
rcpt_da099da89e5ac057
Output Hash
60ead1842fe6e500f7ab86dfef5594b17f8c1b6356cbf5b38b16810305ff9f00
Signature
ed25519:610253510ff5df280558448cd1e061bc5191b74078c839a092ae0e99d82f87916bc589fd2363248b94f216b336b5560e6f25233f283e3b2fc37dcbf20f832509
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser