CONTINUOUS INTERNET TELEMETRY24H DRIFT161 material changesacross 125 domains · -497 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,954 curated domains not answering+1,125 vs yesterdayERRORS25,605 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED73,797 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT161 material changesacross 125 domains · -497 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,954 curated domains not answering+1,125 vs yesterdayERRORS25,605 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED73,797 throttled or blocked our scanner429 rate-limit / 403 bot-block

kroll.com

Observed Jul 18, 2026, 12:15 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMimecast
Secured byLet's Encrypt
Registered withMarkMonitor Inc.
Also usesZoomAtlassianDockerDocuSignFacebook/MetaGoogle Search ConsoleMiroSlack
IPv6 · consulting
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat kroll.com actually stands on - every host below is a signed observation
kroll.com
A / AAAA
172.64.144.119104.18.43.1372a06:98c1:310b::ac40:90772606:4700:4409::6812:2b89
Cloudflareserves the site
NS
burt.ns.cloudflare.comsara.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
usb-smtp-inbound-1.mimecast.comusb-smtp-inbound-2.mimecast.com
Mimecastreceives its email
TLS
kroll.com
Let's Encryptissued its certificate

DNS Records

A 2

  • 172.64.144.119
  • 104.18.43.137

AAAA 2

  • 2a06:98c1:310b::ac40:9077
  • 2606:4700:4409::6812:2b89

MX 2

  • 10usb-smtp-inbound-1.mimecast.com
  • 10usb-smtp-inbound-2.mimecast.com

TXT 40

  • 2934359
  • D0U0F62301
  • MS=ms22473095
  • MS=ms76112556
  • ZOOM_verify_OWmlcryNcGiTBKVwjajDWa
  • ZOOM_verify_vVUPoHP338U3uy0v2JGASQ
  • _7776a1xc240lph1h1ox73fp808r84mz
  • _qffinslhpefwbpznepufr9i79wvxb42
  • anthropic-domain-verification-n3ntpc=QwSMtPaVii56cFRkpbUI6ygBL
  • apple-domain-verification=35PJg7aMVAUfcbzH

NS 2

  • burt.ns.cloudflare.com
  • sara.ns.cloudflare.com

SOA 1

  • burt.ns.cloudflare.com dns.cloudflare.com

SRV 4

  • na-expressway-edge02.duffandphelps.com:5060 p0
  • na-expressway-edge01.duffandphelps.com:5060 p0
  • na-expressway-edge01.duffandphelps.com:5061 p0
  • na-expressway-edge02.duffandphelps.com:5061 p0

TLS Certificates (4)

Common NameIssuerExpires
kroll.com C=US, O=Let's Encrypt, CN=YE2 Mon, 28 Sep 2026 07:02:10 +0000
YE2 C=US, O=ISRG, CN=Root YE Sat, 02 Sep 2028 23:59:59 +0000
Root YE C=US, O=Internet Security Research Group, CN=ISRG Root X2 Thu, 02 Sep 2032 23:59:59 +0000
ISRG Root X2 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for kroll.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for kroll.com <a href="https://domaindrift.io/t/kroll.com"> <img src="https://domaindrift.io/badge/kroll.com.svg" width="300" height="64" alt="DomainDrift signed observations for kroll.com"> </a>

Ed25519 Receipt

Receipt ID
f6ff1cf4-b081-436e-9243-c58b3ded7253
Output Hash
05fcfeda9a051feb9107f27c32b4686d3aa010c140313cf559169fd712a39e99
Signature
ed25519:078f5b9bc856048f3f118a2f6d7ed58ab27c161c2e621add82307461fdb47546c750163c94676219603ca2fb0e703fb6b81b5faf7d97b7bcce284772b3726704
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser