CONTINUOUS INTERNET TELEMETRY24H DRIFT2,183 material changesacross 1,981 domains · -368 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,393 curated domains not answeringlast probe, steadyERRORS10,883 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,183 material changesacross 1,981 domains · -368 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,393 curated domains not answeringlast probe, steadyERRORS10,883 responded with an errorlast probe · 5xx / 404 / 429 / 403

ripple.com

Observed 2026-07-14T03:16:54.390Z (4h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesAtlassianDocuSignMiroDockerNotionZoomGoogle Search Console
10 subdomains · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ripple.com actually stands on - every host below is a signed observation
ripple.com
A / AAAA
76.76.21.21
Cloudflareserves the site
NS
ns-924.awsdns-51.netns-1843.awsdns-38.co.ukns-144.awsdns-18.comns-1069.awsdns-05.org
awsdns-51.net + awsdns-38.co.uk + moreanswers its DNS
MX
mxb-00324c01.gslb.pphosted.commxa-00324c01.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time84 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 76.76.21.21

MX 2

  • 10mxb-00324c01.gslb.pphosted.com
  • 10mxa-00324c01.gslb.pphosted.com

TXT 33

  • sending_domain1055273=5c399e3ff432429d97b7e7a90d5a21ae64aab307981e2354f53a4be1208ac0d9
  • teamviewer-sso-verification=cbe09cc0cc4743fdaf376bac42701734
  • CaQisTuYuhij7jOcodR8
  • neat-pulse-domain-verification-Kkvm5qv=ac7cc2aa-9a82-4046-a5e0-40a9785429f8
  • mandrill_verify._10_fZECVAB67n06pB6Xdw
  • pardot105572=f9775e6396dfbd0d09bf845210ace5d207493b0f83bb229d647e79453cba2efd
  • pendo-domain-verification=AMGfewkMXLqiZe2mNAhF7HkvNDg
  • _globalsign-domain-verification=T5-VK7xTMEy-qPcEnJL4pGgOKcJJ4dyplGYsa3tDRD
  • atlassian-domain-verification=-RQCBOD3x4Cz5eIaN7hfdmcEI3FNbcQfuDueyVuEDEit8l5JbT93XwfJAHmwDypw
  • onetrust-domain-verification=d0298a402ca24b1f9d03e277234d0658

NS 4

  • ns-924.awsdns-51.net
  • ns-1843.awsdns-38.co.uk
  • ns-144.awsdns-18.com
  • ns-1069.awsdns-05.org

SOA 1

  • ns-1843.awsdns-38.co.uk awsdns-hostmaster.amazon.com

CAA 8

  • issue letsencrypt.org
  • issuewild digicert.com
  • issue digicert.com
  • issue sectigo.com
  • issuewild amazon.com
  • issuewild sectigo.com
  • issue amazon.com
  • issue pki.goog

TLS Certificates (0)

None.

Subdomains (10)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ripple.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ripple.com <a href="https://domaindrift.io/t/ripple.com"> <img src="https://domaindrift.io/badge/ripple.com.svg" width="300" height="64" alt="DomainDrift signed observations for ripple.com"> </a>

Ed25519 Receipt

Receipt ID
0671ab89-3e6e-47ff-8281-223ca243bb96
Output Hash
0c95f0d3cbd4d34b3898e666d7695a3357e184dc0c831dfb0567d7f36eac273b
Signature
ed25519:c9eda0b63bf945dda0455af284819f8f8592b025cf7966e47b30fd2020f1600fa1a064ba93334368a346aca8611f08e239f67ad033744acabad9ca17812c9d08
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser