CONTINUOUS INTERNET TELEMETRY24H DRIFT2,080 material changesacross 1,947 domains · +2 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.comEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW1,260 curated domains not answering+134 vs yesterdayERRORS9,877 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED26,901 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,080 material changesacross 1,947 domains · +2 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.comEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW1,260 curated domains not answering+134 vs yesterdayERRORS9,877 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED26,901 throttled or blocked our scanner429 rate-limit / 403 bot-block

cybersource.com

Observed Jul 18, 2026, 13:01 UTC (13h ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall
Runs onCloudflare
Email byAmazon SES
Secured byCloudflare
Registered withMarkMonitor Inc.
Also usesAtlassianFacebook/Meta
tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat cybersource.com actually stands on - every host below is a signed observation
cybersource.com
A / AAAA
162.159.153.2162.159.152.2
Cloudflareserves the site
NS
lloyd.ns.cloudflare.commelinda.ns.cloudflare.coma1-190.akam.neta10-64.akam.net+2 more
cloudflare.com + akam.netanswers its DNS
MX
portal1i.visa.comportal2i.visa.comportal3i.visa.comportal4i.visa.com
Amazon SESreceives its email
TLS
cybersource.com
CLOUDFLAREissued its certificate

DNS Records

A 2

  • 162.159.153.2
  • 162.159.152.2

MX 4

  • 10portal1i.visa.com
  • 10portal2i.visa.com
  • 10portal3i.visa.com
  • 10portal4i.visa.com

TXT 11

  • 0 contactemail hostmaster@visa.com
  • 648jnz5399glybhbhwztyr3dbpqjjwns
  • atlassian-domain-verification=7zr/X7MYe1RLzdXboOQfgkBfeb6kAB892u84YHeyPVkhkgUC8bT6jdsVl5ihIPli
  • atlassian-domain-verification=a0ZlgUYBsYkEDk57K0B/3LjHNN4enn9XLFryUZ5N0l8QdXtHw16hx7ePmsWPUAsh
  • facebook-domain-verification=etvd437xtru4i0es470bfbrkjdkrqx
  • frb215ffv0hbf7zf3dygzz0vgd47h25k
  • ms=ms20147174
  • rqbr7nsr3dmcthgkzq1r50c6g901rgg7
  • v=spf1 mx:ic3.com mx:visa.com mx:authorize.net a:sjemta01.authorize.net a:denmta01.authorize.net ip4:198.241.162.10 ip4:198.241.162.56 ip4:198.241.168.128 ip4:198.241.168.129 ip4:64.18.0.0/20 ip4:66.185.176.0/20 ip4:206.169.226.49 ip4:206.169.226.52 ip4:198.80.42.3 ip4:198.241.128.0/17 ip4:64.94.119.0/24 ip4:8.20.172.130 ip4:8.20.172.131 ip4:198.241.168.121 ip4:198.241.168.120 ip4:198.241.162.12 ip4:198.241.162.22 ip4:198.80.42.3 ip4:198.241.207.0/24 ip4:198.241.206.0/24 ip4:198.241.159.0/24 ip4:199.58.109.96 ip4:199.58.109.97 ip4:198.241.174.0/24 ip4:52.0.175.129 include:amazonses.com include:_spf.salesforce.com -all
  • v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@auth.returnpath.net; ruf=mailto:dmarc_afrf@auth.returnpath.net; rf=afrf; fo=1; pct=100

NS 6

  • lloyd.ns.cloudflare.com
  • melinda.ns.cloudflare.com
  • a1-190.akam.net
  • a10-64.akam.net
  • a2-65.akam.net
  • a9-64.akam.net

SOA 1

  • lloyd.ns.cloudflare.com dns.cloudflare.com

CAA 1

  • iodef "mailto:hostmaster@visa.com"

TLS Certificates (4)

Common NameIssuerExpires
cybersource.com C=US, O=CLOUDFLARE, INC., CN=Cloudflare TLS Issuing ECC CA 1 Sun, 18 Oct 2026 21:40:25 +0000
Cloudflare TLS Issuing ECC CA 1 C=US, O=SSL Corporation, CN=SSL.com TLS Transit ECC CA R2 Fri, 28 Oct 2033 17:17:48 +0000
SSL.com TLS Transit ECC CA R2 C=US, O=SSL Corporation, CN=SSL.com TLS ECC Root CA 2022 Sat, 17 Oct 2037 17:02:22 +0000
SSL.com TLS ECC Root CA 2022 C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Sun, 31 Dec 2028 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cybersource.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for cybersource.com <a href="https://domaindrift.io/t/cybersource.com"> <img src="https://domaindrift.io/badge/cybersource.com.svg" width="300" height="64" alt="DomainDrift signed observations for cybersource.com"> </a>

Ed25519 Receipt

Receipt ID
9603711e-b38c-49fd-8a92-0baa2023dffb
Output Hash
1960583b603ba0ebf0a2633fc8c6bd439507ebb326f6d73f6ae48955c131c76f
Signature
ed25519:b0391640b422f04b1a34b37c9942805ce4fd122bf155bccb245d2e473e3ac13fe3bb08de80dd61a96dee631cb3c2df9849600d1576e010cdc04d248b71ccf80a
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser