occrp.org

Observed Jul 21, 2026, 19:26 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onCloudflare

Email byGoogle Workspace

Secured byGoogle Trust Services

Also usesAtlassianFacebook/MetaGoogle Search ConsoleSlack

IPv6 · non_profit

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat occrp.org actually stands on - every host below is a signed observation

occrp.org

A / AAAA

104.20.24.254172.66.153.692606:4700:10::ac42:99452606:4700:10::6814:18fe

Cloudflareserves the site

ophelia.ns.cloudflare.comyichun.ns.cloudflare.com

cloudflare.comanswers its DNS

aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.com+4 more

Google Workspacereceives its email

TLS

occrp.org

Google Trust Servicesissued its certificate

DNS Records

A 2

104.20.24.254
172.66.153.69

AAAA 2

2606:4700:10::ac42:9945
2606:4700:10::6814:18fe

MX 8

10aspmx.l.google.com
20alt1.aspmx.l.google.com
20alt2.aspmx.l.google.com
30aspmx2.googlemail.com
30aspmx3.googlemail.com
30aspmx4.googlemail.com
30aspmx5.googlemail.com
80_dc-mx.5bca2efb9b90.occrp.org

TXT 57

MS=ms32682752
anthropic-domain-verification-k8f2wy=tVBH8sreXOxFGhkRWjNp2PqYr
apple-domain-verification=bhHZRHdCk4qvHpMG
asv=bcb7ae2b256081ccb35ede63ce54b67c
atlassian-domain-verification=41jArbO1DdanJ6GhzFPkO13WmTiJ9XlysSLCIrrSHRQEo9PthuuB2JmN9JVq8Csj 3m
facebook-domain-verification=0tp6l06kx50qxahngqgoc7pafes533
globalsign-domain-verification=rGNEA2NEUzDw_KldVRJOJvgsKzh7UwhYdpzgoBpJiL
google-site-verification=L0xZkBj9MvBBOk9C2GX-mzNOUI2yhu3DGjU-FntJ79U
google-site-verification=M3z_ySfE8WMr4L2lNYQnnukQtcI_OCTQ-yDBI4pACqg
google-site-verification=kEGLJHfqBiG_J3Gn_qmIZjUIzyuc4d-gfY2LqUPA0iM

NS 2

ophelia.ns.cloudflare.com
yichun.ns.cloudflare.com

SOA 1

ophelia.ns.cloudflare.com dns.cloudflare.com

CAA 12

issue "comodoca.com"
issue "digicert.com; cansignhttpexchanges=yes"
issue "letsencrypt.org"
issue "pki.goog; cansignhttpexchanges=yes"
issue "sectigo.com"
issue "ssl.com"
issuewild "comodoca.com"
issuewild "digicert.com; cansignhttpexchanges=yes"
issuewild "letsencrypt.org"
issuewild "pki.goog; cansignhttpexchanges=yes"

TLS Certificates (3)

Common Name	Issuer	Expires
`occrp.org`	C=US, O=Google Trust Services, CN=WE1	Tue, 15 Sep 2026 05:00:48 +0000
`WE1`	C=US, O=Google Trust Services LLC, CN=GTS Root R4	Tue, 20 Feb 2029 14:00:00 +0000
`GTS Root R4`	C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA	Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for occrp.org. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/occrp.org">
  <img src="https://domaindrift.io/badge/occrp.org.svg"
       width="300" height="64" alt="DomainDrift signed observations for occrp.org">
</a>

Ed25519 Receipt

Receipt ID: rcpt_96a05a14798b1e60
Output Hash: 00cff1c3d7f69fb96ec59a4749255ea1bdf4d557d5777f34c8f1917a3315a2ec
Signature: ed25519:59d9d6ab3f1940d9f966898e4607dbd19349c42c9fef4b10b4c3b25e483d9ce211929d219105667fceb060a25af9c99d034710d7d3f4811060e95791f600200f
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/occrp.org