CONTINUOUS INTERNET TELEMETRY24H DRIFT3,240 material changesacross 2,667 domains · last 24h · +1,324 vs yesterdayDNS DRIFT44 domains changed DNS providertop destination cloudflare.com · +14 vs yesterdayEMAIL DRIFT9 domains switched email providertop destination google.comCERT DRIFT15 domains switched issuing CA24h

threatlocker.com

Observed Jul 26, 2026, 11:17 UTC (2h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Secured byDigiCert
Registered withNameCheap, Inc.
Also usesAtlassianHubSpot
IPv6 · 1 subdomain · tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.

No payload stored for this observation.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for threatlocker.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for threatlocker.com <a href="https://domaindrift.io/t/threatlocker.com"> <img src="https://domaindrift.io/badge/threatlocker.com.svg" width="300" height="64" alt="DomainDrift signed observations for threatlocker.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_4744bf8b305c6c38
Output Hash
ad39b0213e53048e4e7e354e091fa62d70887fdcfe4877d6aa58ac4271cc3b27
Signature
ed25519:f59153b4f60918353b3cc87a6ed03c327c940a077464877a2c24366ba780ff46a3a0e80a27e74a95ef75da6817461ba78b684af603ab7f4135cdb65884fb970c
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser