CONTINUOUS INTERNET TELEMETRY24H3,439 material changesacross 2,970 domains · +41 vs yesterdayMOVES27 domains changed DNS providertop destination cloudflare.comMOVES6 domains switched email providertop destination 365cool.comTLS9 domains switched issuing CA24h · +2 vs yesterdayNOW9,715 curated domains not answeringlast probe, steady24H3,439 material changesacross 2,970 domains · +41 vs yesterdayMOVES27 domains changed DNS providertop destination cloudflare.comMOVES6 domains switched email providertop destination 365cool.comTLS9 domains switched issuing CA24h · +2 vs yesterdayNOW9,715 curated domains not answeringlast probe, steady

okcoin.com

Observed 2026-07-12T15:44:33.753Z (9h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Registered withAmazon Registrar, Inc.
Also usesAtlassianFacebook/MetaGoogle Search Console
DNSSEC on · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat okcoin.com actually stands on - every host below is a signed observation
okcoin.com
A / AAAA
54.164.84.24498.95.155.7652.200.220.168
Cloudflareserves the site
NS
ns-1644.awsdns-13.co.ukns-50.awsdns-06.comns-538.awsdns-03.netns-1103.awsdns-09.org
awsdns-13.co.uk + awsdns-06.com + moreanswers its DNS
MX
mxa-00969801.gslb.pphosted.comalt4.aspmx.l.google.comalt2.aspmx.l.google.commxb-00969801.gslb.pphosted.com+3 more
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 302 → https://www.okcoin.com/
HTTP status302
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time243 ms
DNS resolutionNOERROR
Redirect chain
https://www.okcoin.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 3

  • 54.164.84.244
  • 98.95.155.76
  • 52.200.220.168

MX 7

  • 1mxa-00969801.gslb.pphosted.com
  • 30alt4.aspmx.l.google.com
  • 10alt2.aspmx.l.google.com
  • 1mxb-00969801.gslb.pphosted.com
  • 30alt3.aspmx.l.google.com
  • 5aspmx.l.google.com
  • 10alt1.aspmx.l.google.com

TXT 14

  • _rw3851grgyb7n33qjs3b5qdl0syf5jb
  • atlassian-domain-verification=4LQe7yVCBas1ebJJeAlhhRzIWwGAZGc02uDxExqTnzTi1hIEEM5F8ODjem8Vm8SP
  • 5987xj7m1g3076pshmccdp7g9t5616m5
  • twilio-domain-verification=db5615e4a92c015583411b3683a010a1
  • apple-domain-verification=wV9YeuQGjVtRD1KM
  • szt8csj76bhmkhrwys76gs3b3nv1vwfv
  • v=spf1 include:_spf.google.com include:mail.zendesk.com include:spf-00969801.pphosted.com -all
  • 3jhxjmcd7ggtl3k3jgqbhzm2ddgts7tx
  • qzhb866zmsh161dh3qhkb3kmb160hhlp
  • facebook-domain-verification=ipoffils9hdqkrf9mnwez53asozh48

NS 4

  • ns-1644.awsdns-13.co.uk
  • ns-50.awsdns-06.com
  • ns-538.awsdns-03.net
  • ns-1103.awsdns-09.org

SOA 1

  • ns-538.awsdns-03.net awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what Connor observes and signs for okcoin.com. It updates itself. It attests a signed observation - not that the site is safe.

Connor signed-observation badge for okcoin.com <a href="https://domaindrift.io/t/okcoin.com"> <img src="https://domaindrift.io/badge/okcoin.com.svg" width="300" height="64" alt="Connor signed observations for okcoin.com"> </a>

Ed25519 Receipt

Receipt ID
e33eb3dc-467a-41d3-8541-c004b1100983
Output Hash
2dab6a996e8de8c8c09b7aebc13571208db7eee96e426994c08c6931650a44ba
Signature
ed25519:dc6baf2ee67969a7a5db0734df14cab1dfc631d034106e1dd916aa2a6cd79d98628fbfe8496e076d2bd12289ebe99683fc03c6a2cb1fbb588519ab843500070f
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser