mandiant.com

Observed 2026-07-17T20:44:45.353Z (10h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle Workspace

Registered withMarkMonitor Inc.

Also usesDocuSign

IPv6 · 8 subdomains · cybersecurity_expanded

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat mandiant.com actually stands on - every host below is a signed observation

mandiant.com

A / AAAA

162.159.240.125162.159.241.1252606:4700:300b::a29f:f07d2606:4700:300b::a29f:f17d

Cloudflareserves the site

joel.ns.cloudflare.comjade.ns.cloudflare.com

cloudflare.comanswers its DNS

smtp.google.com

Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://cloud.google.com/security/consulting/mandiant-services

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time10 ms

DNS resolutionNOERROR

Redirect chain

https://cloud.google.com/security/consulting/mandiant-services

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

162.159.240.125
162.159.241.125

AAAA 2

2606:4700:300b::a29f:f07d
2606:4700:300b::a29f:f17d

MX 1

10smtp.google.com

TXT 6

cisco-ci-domain-verification=1480c6fe92bd86b480ca5274dc5bfdc427e85f70d74aad91e3a0ca8a7f1e6971
v=spf1 include:_spf.google.com -all
docusign=ff1e8fb5-38d1-48b3-bec4-ab5e8fbb8a80
docusign=5e2a783b-e805-4b1d-b0d3-920818d13a26
v=DKIM1; (detected)
v=DNSSEC1; (detected)

NS 2

joel.ns.cloudflare.com
jade.ns.cloudflare.com

SOA 1

jade.ns.cloudflare.com dns.cloudflare.com

CAA 17

issuewild amazonaws.com
issuewild awstrust.com
issuewild sectigo.com
issue digicert.com; cansignhttpexchanges=yes
issue amazonaws.com
issue awstrust.com
iodef mailto:wafadmin@fireeye.com
issuewild pki.goog; cansignhttpexchanges=yes
issue pki.goog; cansignhttpexchanges=yes
issuewild amazon.com

TLS Certificates (0)

None.

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mandiant.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/mandiant.com">
  <img src="https://domaindrift.io/badge/mandiant.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for mandiant.com">
</a>

Ed25519 Receipt

Receipt ID: 0f26e38a-7a00-4be8-80b1-b4348908add6
Output Hash: 77420e79243be36c9d6555a20a0d9013f88b2f7dee144d0a41ded3d400bdfb42
Signature: ed25519:faaf655a317b7f149827a6712e9f9be133baa343fbaceead89b5ec512d041a285d4b897a52c12c211c7c86b929d1599c7a1c0f63c767c210fc74911ca107b40b
Public Key: ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/mandiant.com