CONTINUOUS INTERNET TELEMETRY24H DRIFT1,959 material changesacross 1,780 domains · -592 vs yesterdayDNS DRIFT19 domains changed DNS providertop destination parity.domains · +3 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination google.com · -2 vs yesterdayCERT DRIFT2 domains switched issuing CA24h · -3 vs yesterdayNOW3,429 curated domains not answeringlast probe, steadyERRORS8,555 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,312 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,959 material changesacross 1,780 domains · -592 vs yesterdayDNS DRIFT19 domains changed DNS providertop destination parity.domains · +3 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination google.com · -2 vs yesterdayCERT DRIFT2 domains switched issuing CA24h · -3 vs yesterdayNOW3,429 curated domains not answeringlast probe, steadyERRORS8,555 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,312 throttled or blocked our scanner429 rate-limit / 403 bot-block

2checkout.com

Observed 2026-07-14T18:39:27.628Z (5h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Also usesGoogle Search Console
10 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat 2checkout.com actually stands on - every host below is a signed observation
2checkout.com
A / AAAA
45.60.12.9445.60.102.94
Cloudflareserves the site
NS
dns1.cscdns.netdns2.cscdns.net
cscdns.netanswers its DNS
MX
2checkout-com.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.2checkout.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time338 ms
DNS resolutionNOERROR
Redirect chain
https://www.2checkout.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 45.60.12.94
  • 45.60.102.94

MX 1

  • 02checkout-com.mail.protection.outlook.com

TXT 11

  • globalsign-domain-verification=A9E8F9F1D6B2F560AF4D4DBDFF1670EF
  • google-site-verification=rpaNQvlqLnOB-wP8Cg5WVHG0JdmWJXciSeA2DINLADQ
  • 3N4EtqtO6kmkelapDEQHw0++5BayCx5o/GuMEvNz6hCyVu3zZ1mB83mz1OBO//pFWNdvC1Rjs8J3MFiEoLN8og==
  • rgtd6dafj78imqbf65sl4tsaaf
  • v=spf1 ip4:64.128.115.196 ip4:64.128.115.221 ip4:162.221.61.196 ip4:162.221.61.221 include:spf.protection.outlook.com include:_spf.salesforce.com include:mktomail.com include:_prod_spf.avangate.com include:mail.zendesk.com include:sendgrid.net -all
  • bqn82z479jvxmzqhvhd9s115dxh9xg5t
  • dnvr72s1mchtgct1c3xw9tgk1pn0m5nq
  • apple-domain-verification=O2xjmtd6JRn9ZST0
  • MS=ms86533424
  • globalsign-domain-verification=D9D6683ACF9C5F0B523057289758167F

NS 2

  • dns1.cscdns.net
  • dns2.cscdns.net

SOA 1

  • dns1.cscdns.net hostmaster.cscdns.net

TLS Certificates (0)

None.

Subdomains (10)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for 2checkout.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for 2checkout.com <a href="https://domaindrift.io/t/2checkout.com"> <img src="https://domaindrift.io/badge/2checkout.com.svg" width="300" height="64" alt="DomainDrift signed observations for 2checkout.com"> </a>

Ed25519 Receipt

Receipt ID
a8e95a83-a9a4-4a5b-b1ce-7eb0a8be5fc4
Output Hash
16ef82f71591aa110a90a16ebb38f83af33a23a5700e354b134121c8c1fca747
Signature
ed25519:a35a6ff7ea8e712e6b3096178f477bb3c0d5e047c18f700785282fb7bead5d8a314c6adcc218e2041430c69c6aafb1ff0d8f8f05af9c3d4a605343375a768e00
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser