CONTINUOUS INTERNET TELEMETRY24H DRIFT3,174 material changesacross 2,745 domains · -224 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,319 curated domains not answering-6,399 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,174 material changesacross 2,745 domains · -224 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,319 curated domains not answering-6,399 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 403

rubiconproject.com

Observed 2026-07-12T19:57:49.390Z (9h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Registered withGoDaddy.com, LLC
Also usesGoogle Search ConsoleDocuSignSlack
IPv6 · 11 subdomains · tranco_1k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rubiconproject.com actually stands on - every host below is a signed observation
rubiconproject.com
A / AAAA
99.84.215.7399.84.215.6999.84.215.2899.84.215.118+8 more
Cloudflareserves the site
NS
ns-483.awsdns-60.comns-1150.awsdns-15.orgns-644.awsdns-16.netns-1722.awsdns-23.co.uk
awsdns-60.com + awsdns-15.org + moreanswers its DNS
MX
aspmx.l.google.comalt2.aspmx.l.google.comalt1.aspmx.l.google.comaspmx2.googlemail.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.rubiconproject.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time160 ms
DNS resolutionNOERROR
Redirect chain
https://www.rubiconproject.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 4

  • 99.84.215.73
  • 99.84.215.69
  • 99.84.215.28
  • 99.84.215.118

AAAA 8

  • 2600:9000:2199:9c00:19:133b:2800:93a1
  • 2600:9000:2199:9a00:19:133b:2800:93a1
  • 2600:9000:2199:1e00:19:133b:2800:93a1
  • 2600:9000:2199:5800:19:133b:2800:93a1
  • 2600:9000:2199:400:19:133b:2800:93a1
  • 2600:9000:2199:e00:19:133b:2800:93a1
  • 2600:9000:2199:7e00:19:133b:2800:93a1
  • 2600:9000:2199:8a00:19:133b:2800:93a1

MX 5

  • 1aspmx.l.google.com
  • 5alt2.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 10aspmx2.googlemail.com
  • 10aspmx3.googlemail.com

TXT 11

  • google-site-verification=8Oe3JXELIVSWdd5P6OY4UM5pF_aqaApPAbdvsIqjvtY
  • 00d700000008awveam
  • v=spf1 ip4:72.34.113.100 ip4:69.194.143.140 include:spf.rubiconproject.com include:sendgrid.net include:_spf.google.com include:mktomail.com include:spf.mandrillapp.com include:aspmx.pardot.com ~all
  • docusign=740bb1dc-f7a3-4027-b408-aed4bd2824d0
  • google-site-verification=U-FUvU0VS4falHBMujbJtZpgqy95I2EFC08ADvrqlSQ
  • logmein-domain-confirmation 90DIFG9EEUT8U8R48952255
  • slack-domain-verification=mlIG4ylJounirRIFXuVrwirxvgiAUa63gagbhqV0
  • apple-domain-verification=G4AVkC9r63d1Wgp7
  • adobe-idp-site-verification=7ba00fd005454fcba9ed31a7ad48786fef98ee97ccc28d469c180d51d3aa792b
  • v=DMARC1; p=quarantine; pct=50; rua=mailto:dmarc@rubiconproject.com

NS 4

  • ns-483.awsdns-60.com
  • ns-1150.awsdns-15.org
  • ns-644.awsdns-16.net
  • ns-1722.awsdns-23.co.uk

SOA 1

  • ns-644.awsdns-16.net awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (11)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for rubiconproject.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for rubiconproject.com <a href="https://domaindrift.io/t/rubiconproject.com"> <img src="https://domaindrift.io/badge/rubiconproject.com.svg" width="300" height="64" alt="DomainDrift signed observations for rubiconproject.com"> </a>

Ed25519 Receipt

Receipt ID
efd86532-bd6f-4a40-ad65-b2363259c389
Output Hash
1c2bef54a2953e66ef2608d02ba953f15d9d9de6ce67a276d411aae904c0e4e4
Signature
ed25519:9959d2ecc5c8c6427bb826ac4b7f412e45a04b2b3ffee9bc39b6af662801e82b0e8f8a3a173266da061730c96f9d7329d953fad979a15e9d1849cfb1397e630a
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser