CONTINUOUS INTERNET TELEMETRY24H DRIFT7,483 material changesacross 6,980 domains · last 24h · +2,013 vs yesterdayDNS DRIFT225 domains changed DNS providertop destination cloudflare.com · +112 vs yesterdayEMAIL DRIFT39 domains switched email providertop destination outlook.comCERT DRIFT49 domains switched issuing CA24h · +23 vs yesterdayNOW579 curated domains not reachablelast probe, steadySITE ERRORS33,863 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 147,198 sites429 rate-limit / 403 bot-block, a posture signal

citypass.com

Observed Jul 27, 2026, 20:55 UTC (50m ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byMailchimp
Secured byLet's Encrypt
Also usesGoogle Search Console
IPv6 · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat citypass.com actually stands on - every host below is a signed observation
citypass.com
A / AAAA
172.66.160.78104.20.16.1842606:4700:10::6814:10b82606:4700:10::ac42:a04e
Cloudflareserves the site
NS
dave.ns.cloudflare.comolga.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
mx1-us1.ppe-hosted.commx2-us1.ppe-hosted.com
Mailchimpreceives its email
TLS
citypass.com
Let's Encryptissued its certificate

DNS Records

A 2

  • 172.66.160.78
  • 104.20.16.184

AAAA 2

  • 2606:4700:10::6814:10b8
  • 2606:4700:10::ac42:a04e

MX 2

  • 1mx1-us1.ppe-hosted.com
  • 1mx2-us1.ppe-hosted.com

TXT 7

  • anthropic-domain-verification-476a62=QueC3hf7fm6JwHj4DIO5qwi4E
  • google-site-verification=4iRSJQb-U8ibbqK2-2mf35H-FxlDfZjdZjlfSTKgBFQ
  • google-site-verification=wBf7_DuvPlwS9NAdW_1odXWU94ccNuk6PRVxB_e4Qgk
  • intacct-esk=4FED1A502123D94FE053ED06A8C0E14D
  • v=spf1 ip4:45.33.115.59 ip6:2600:3c00::2000:69ff:fe8a:9bb ip4:149.72.210.236 a:maildrop.endpointdev.com a:dispatch-us.ppe-hosted.com include:spf.braintreegateway.com include:_spf.intacct.com include:spf.protection.outlook.com include:_spf.pphosted.com include:_spf-internal.citypass.com include:servers.mcsv.net ~all
  • google-site-verification=NK0AieTc_UGvipEhyeYU7QQ5shYtnfyomUB0Ve2VCFE
  • v=DMARC1; p=quarantine; sp=reject; rua=mailto:c998db392d02.a@dmarcinput.com; ruf=mailto:c998db392d02.f@dmarcinput.com; fo=1

NS 2

  • dave.ns.cloudflare.com
  • olga.ns.cloudflare.com

SOA 1

  • dave.ns.cloudflare.com dns.cloudflare.com

CAA 11

  • iodef "mailto:webdev@citypass.com"
  • issue "comodoca.com"
  • issue "digicert.com; cansignhttpexchanges=yes"
  • issue "letsencrypt.org"
  • issue "pki.goog; cansignhttpexchanges=yes"
  • issue "ssl.com"
  • issuewild "comodoca.com"
  • issuewild "digicert.com; cansignhttpexchanges=yes"
  • issuewild "letsencrypt.org"
  • issuewild "pki.goog; cansignhttpexchanges=yes"

TLS Certificates (4)

Common NameIssuerExpires
citypass.com C=US, O=Let's Encrypt, CN=YE2 Wed, 16 Sep 2026 21:34:07 +0000
YE2 C=US, O=ISRG, CN=Root YE Sat, 02 Sep 2028 23:59:59 +0000
Root YE C=US, O=Internet Security Research Group, CN=ISRG Root X2 Thu, 02 Sep 2032 23:59:59 +0000
ISRG Root X2 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for citypass.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for citypass.com <a href="https://domaindrift.io/t/citypass.com"> <img src="https://domaindrift.io/badge/citypass.com.svg" width="300" height="64" alt="DomainDrift signed observations for citypass.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_a7f079ac3c31c52c
Output Hash
e1c6189c8e71f452bd2eef948a797ce35ef685d5ab155cd7d6538e5aa057e18c
Signature
ed25519:f708b17edd98f17396cee02450b075fd34579b36f25bcfa210cd2c1d11deeca6b306cd37a87033294dd486cf5a3935bc1a026e5d9edaf27a2dd8a51bd8a3d602
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser