CONTINUOUS INTERNET TELEMETRY24H DRIFT2,077 material changesacross 1,868 domains · -474 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,391 curated domains not answeringlast probe, steadyERRORS10,886 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,077 material changesacross 1,868 domains · -474 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,391 curated domains not answeringlast probe, steadyERRORS10,886 responded with an errorlast probe · 5xx / 404 / 429 / 403

ricksteves.com

Observed 2026-07-13T11:55:35.002Z (18h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMimecast
Registered withNetwork Solutions, LLC
Also usesGoogle Search ConsoleFacebook/MetaAtlassian
IPv6 · 7 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ricksteves.com actually stands on - every host below is a signed observation
ricksteves.com
A / AAAA
104.20.29.76172.66.158.2402606:4700:10::ac42:9ef02606:4700:10::6814:1d4c
Cloudflareserves the site
NS
sydney.ns.cloudflare.comgabriel.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
us-smtp-inbound-2.mimecast.comus-smtp-inbound-1.mimecast.com
Mimecastreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.ricksteves.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time57 ms
DNS resolutionNOERROR
Redirect chain
https://www.ricksteves.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 104.20.29.76
  • 172.66.158.240

AAAA 2

  • 2606:4700:10::ac42:9ef0
  • 2606:4700:10::6814:1d4c

MX 2

  • 10us-smtp-inbound-2.mimecast.com
  • 10us-smtp-inbound-1.mimecast.com

TXT 10

  • V+gXqgOh8KlmY1eZcZiaBrTp02sisZNwX0DQ1Vbballm0X57V1Ls2P4HWmIr2BEhn7q4Du7fby24TuJg8ZQIJg==
  • google-site-verification=s8GOjuvAxU6pPbERKhG6ubmJPcWwYO0TDqHC0cRk-Gg
  • atlassian-sending-domain-verification=1f60d665-bb82-4d33-a08a-55248317960d
  • MS=ms81925690
  • anthropic-domain-verification-h5xqeq=HYEXRmyNziejVLvsHBTR7gMIn
  • facebook-domain-verification=2buobwl4s0jp0e37o6ftn5gceufy7q
  • apple-domain-verification=44bh4PwJI5LaQ2Nj
  • v=spf1 ip4:74.209.160.164 ip4:168.245.32.225 include:mailerhdz.ricksteves.com include:spf.protection.outlook.com include:em3350.ricksteves.com include:email.ricksteves.com include:us._netblocks.mimecast.com mx mx:email.ricksteves.com -all
  • atlassian-domain-verification=Udv3qaObeuewmRx4bFLx2I/A0HeQvaxE8oUfmaneYPwaG4LFVIYqfHlbNH/0zmtx
  • v=DMARC1; p=reject; rua=mailto:7532ca0746d1778@rep.dmarcanalyzer.com; ruf=mailto:7532ca0746d1778@for.dmarcanalyzer.com; sp=none; adkim=s; aspf=s; fo=1;

NS 2

  • sydney.ns.cloudflare.com
  • gabriel.ns.cloudflare.com

SOA 1

  • gabriel.ns.cloudflare.com dns.cloudflare.com

CAA 12

  • issuewild comodoca.com
  • issuewild sectigo.com
  • issue pki.goog; cansignhttpexchanges=yes
  • issuewild digicert.com; cansignhttpexchanges=yes
  • issue digicert.com; cansignhttpexchanges=yes
  • issue sectigo.com
  • issuewild pki.goog; cansignhttpexchanges=yes
  • issue comodoca.com
  • issuewild ssl.com
  • issue letsencrypt.org

TLS Certificates (0)

None.

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ricksteves.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ricksteves.com <a href="https://domaindrift.io/t/ricksteves.com"> <img src="https://domaindrift.io/badge/ricksteves.com.svg" width="300" height="64" alt="DomainDrift signed observations for ricksteves.com"> </a>

Ed25519 Receipt

Receipt ID
2b8ecd47-a1e7-4dd1-b246-8a7e2b6de7b2
Output Hash
9f1f2f1afce6367f38e811e443ae929ff64ed13ab281b86a87f91c62c71b4e84
Signature
ed25519:8a9657d3a02fe0c8571e86f607f851b505680e3e2249b47a934e6f169b68c69bf398a1669e432e29bc38f4e4e85f49f31b88e11aa30fc3497497965b4ad1c801
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser