CONTINUOUS INTERNET TELEMETRY24H DRIFT2,433 material changesacross 2,314 domains · +1,011 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.com · -6 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +3 vs yesterdayCERT DRIFT46 domains switched issuing CA24h · +46 vs yesterdayNOW772 curated domains not answering+62 vs yesterdayERRORS6,031 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED16,292 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,433 material changesacross 2,314 domains · +1,011 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.com · -6 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +3 vs yesterdayCERT DRIFT46 domains switched issuing CA24h · +46 vs yesterdayNOW772 curated domains not answering+62 vs yesterdayERRORS6,031 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED16,292 throttled or blocked our scanner429 rate-limit / 403 bot-block

ceridian.com

Observed 2026-07-18T12:07:40.057418237+00:00 (7h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Secured byDigiCert
Registered withMarkMonitor Inc.
Also usesDocuSignMiroDocker
fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ceridian.com actually stands on - every host below is a signed observation
ceridian.com
A / AAAA
20.119.16.26
Cloudflareserves the site
NS
ns1-08.azure-dns.comns2-08.azure-dns.netns3-08.azure-dns.orgns4-08.azure-dns.info
azure-dns.com + azure-dns.net + moreanswers its DNS
MX
mxa-0001b201.gslb.pphosted.commxb-0001b201.gslb.pphosted.com
Proofpointreceives its email
TLS
ceridian.com
DigiCert Incissued its certificate

DNS Records

A 1

  • 20.119.16.26

MX 2

  • 10mxa-0001b201.gslb.pphosted.com
  • 10mxb-0001b201.gslb.pphosted.com

TXT 16

  • MS=ms16597862
  • 35c0b05f6da64cbabf1c10fa4a74c364
  • _globalsign-domain-verification=8y4TzWFo87QK197WhYe06CUUUieYA1JWIQsAquclKj
  • dropbox-domain-verification=m050tix2bq2y
  • onx=e8016ae0-6917-4a02-96df-a10e8c8eaf00
  • onx=2daff486-21dc-4971-a3cb-23945656dc77
  • docusign=0ba17af9-778a-4954-a40e-a5207a
  • onetrust-domain-verification=e9e2dca2cb9c44d080fe1e0aa11d53d2
  • miro-verification=0f47c16894c9f32013a0e6a401be4c24402dee08
  • adobe-idp-site-verification=c23921155ca28836257f5b723b35fa464ffd68401d6f0ba9c48d604562ff731b

NS 4

  • ns1-08.azure-dns.com
  • ns2-08.azure-dns.net
  • ns3-08.azure-dns.org
  • ns4-08.azure-dns.info

SOA 1

  • ns1-08.azure-dns.com dnstech.ceridian.com

TLS Certificates (2)

Common NameIssuerExpires
ceridian.com C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=GeoTrust TLS RSA CA G1 Tue, 15 Dec 2026 23:59:59 +0000
GeoTrust TLS RSA CA G1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Tue, 02 Nov 2027 12:23:37 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ceridian.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ceridian.com <a href="https://domaindrift.io/t/ceridian.com"> <img src="https://domaindrift.io/badge/ceridian.com.svg" width="300" height="64" alt="DomainDrift signed observations for ceridian.com"> </a>

Ed25519 Receipt

Receipt ID
d267cb35-9e13-40e1-a492-fbce08798c01
Output Hash
9d838bceec3f6d2413f14859810046a72c1843d5278e5f064ae6fe88f6fd4ca6
Signature
ed25519:8af69d524d0f306358d6dea9a2d04d4cabe93e02b240ad47ea25ac4d25455b8870ed5064cd5dbd2df3450824bb44791d6b72e50194fe6c6b287b9f15edf6400f
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser