CONTINUOUS INTERNET TELEMETRY24H DRIFT3,586 material changesacross 3,112 domains · +188 vs yesterdayDNS DRIFT27 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT6 domains switched email providertop destination sendgw.comCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW9,710 curated domains not answeringlast probe, steady24H DRIFT3,586 material changesacross 3,112 domains · +188 vs yesterdayDNS DRIFT27 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT6 domains switched email providertop destination sendgw.comCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW9,710 curated domains not answeringlast probe, steady

stepan.com

Observed 2026-07-12T16:32:27.776Z (10h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMimecast
Registered withAmazon Registrar, Inc.
Also usesGoogle Search Console
6 subdomains · manufacturing
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat stepan.com actually stands on - every host below is a signed observation
stepan.com
A / AAAA
13.89.136.59
Cloudflareserves the site
NS
ns3-04.azure-dns.orgns4-04.azure-dns.infons2-04.azure-dns.netns1-04.azure-dns.com
azure-dns.org + azure-dns.info + moreanswers its DNS
MX
usb-smtp-inbound-1.mimecast.comusb-smtp-inbound-2.mimecast.com
Mimecastreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → http://www.stepan.com//
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time83 ms
DNS resolutionNOERROR
Redirect chain
http://www.stepan.com//

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 13.89.136.59

MX 2

  • 10usb-smtp-inbound-1.mimecast.com
  • 10usb-smtp-inbound-2.mimecast.com

TXT 11

  • pardot478922=c9469ce01ba740075fe816f839acf01d5a9f0a0d8752f99644da0fe6c27643a4
  • dtm-domain-verification=i1OsAvcR8abH3XHz8viCZcGAegIF15L33aT4FGtPP48
  • v=spf1 ip4:198.180.156.0/24 ip4:213.41.42.80/28 ip4:213.41.42.96 ip4:67.192.160.34 ip4:67.192.160.35 ip4:67.192.137.46 ip4:67.192.137.47 ip4:68.233.76.0/23 ip4:35.157.16.31 ip4:23.21.149.125 ip4:54.216.77.168 ip4:54.246.232.180 ip4:54.194.61.95 ip4:54.195.113.45 ip4:34.247.168.44 ip4:63.32.13.159 ip4:87.198.219.130 ip4:87.252.219.254 ip4:87.198.219.153 ip4:103.151.192.0/23 ip4:185.12.80.0/22 ip4:188.172.128.0/20 ip4:192.161.144.0/20 ip4:216.198.0.0/18 include:et._spf.pardot.com include:_spf.salesforce.com include:spf.protection.outlook.com include:_spf-sfdc.sapsf.com include:_spf2-sfdc.sapsf.com include:usb._netblocks.mimecast.com include:_spf-dc41.sapsf.com -all
  • apple-domain-verification=txrJOZjZ8VOgjuiQ
  • google-site-verification=aWoOz2uONi6ZKkA9CbRwj0sl5BfFLi-7aOyiZeq4Lag
  • adobe-idp-site-verification=6a9a34f4ddc9370e083d2b329de9ee13665811311d4c45a1a478d779e94faf6d
  • adobe-idp-site-verification=0479b78c679f65724c9c7505ca5313001dc5ac3dd11c441c29f6c05d6dd8a562
  • 0ed1fe018ab2ac3faecc8f46a6a21b5066d2750dce
  • MS=ms61191901
  • 00DEa00000QVYfx=1TBEa0000000Ota

NS 4

  • ns3-04.azure-dns.org
  • ns4-04.azure-dns.info
  • ns2-04.azure-dns.net
  • ns1-04.azure-dns.com

SOA 1

  • ns1-04.azure-dns.com azuredns-hostmaster.microsoft.com

TLS Certificates (0)

None.

Subdomains (6)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for stepan.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for stepan.com <a href="https://domaindrift.io/t/stepan.com"> <img src="https://domaindrift.io/badge/stepan.com.svg" width="300" height="64" alt="DomainDrift signed observations for stepan.com"> </a>

Ed25519 Receipt

Receipt ID
f83ad1ed-70b2-40e3-a5ba-2501cc0847a8
Output Hash
69c2db3075abd210bf11f0be84392297c93ca6ffb1c01024e059a95ad197e3bd
Signature
ed25519:4c31794720f782bf59ed10299394d17a629454ba8956b3f2163c4532931af7dfe74a871a166f501d7c99611a678f1e75b1092dc963495b7a866b3a0a2730be07
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser