CONTINUOUS INTERNET TELEMETRY24H DRIFT416 material changesacross 376 domains · -242 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,264 curated domains not answering+435 vs yesterdayERRORS21,689 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED60,326 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT416 material changesacross 376 domains · -242 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,264 curated domains not answering+435 vs yesterdayERRORS21,689 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED60,326 throttled or blocked our scanner429 rate-limit / 403 bot-block

wso2.com

Observed Jul 19, 2026, 12:53 UTC (18h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Also usesGoogle Search ConsoleDocuSign
IPv6 · 7 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat wso2.com actually stands on - every host below is a signed observation
wso2.com
A / AAAA
104.18.15.72104.18.14.722606:4700::6812:e482606:4700::6812:f48
Cloudflareserves the site
NS
merlin.ns.cloudflare.comdana.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
aspmx4.googlemail.comaspmx2.googlemail.comalt1.aspmx.l.google.comalt2.aspmx.l.google.com+3 more
Google Workspacereceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time106 ms
DNS resolutionNOERROR
MCP This domain advertises an AI service endpoint at _mcp._tcp.
v=spf1 -all

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 104.18.15.72
  • 104.18.14.72

AAAA 2

  • 2606:4700::6812:e48
  • 2606:4700::6812:f48

MX 7

  • 30aspmx4.googlemail.com
  • 30aspmx2.googlemail.com
  • 20alt1.aspmx.l.google.com
  • 20alt2.aspmx.l.google.com
  • 30aspmx5.googlemail.com
  • 10aspmx.l.google.com
  • 30aspmx3.googlemail.com

TXT 18

  • 5f7005fc867642a2cc92ada303448371.wso2.com
  • rippling-domain-verification=a13185df889edd75
  • v=MCPv1; k=ed25519; p=Lkyrt7IM94w8ZXKZllCJFX19L/5JmxqQLDHm8w2PGw8=
  • access-domain-verification=94e2261e255db11f82dc66b93736eb008eceea3a6a1a94f13a10db0cb9c2b388
  • v=spf1 a:b.spf.service-now.com a:c.spf.service-now.com a:d.spf.service-now.com ip4:203.94.95.1/32 ip4:198.245.81.0/24 ip4:136.147.176.0/24 ip4:13.111.0.0/22 ip4:13.111.52.0/22 ip4:13.111.63.0/24 ip4:13.111.68.0/24 ip4:13.111.72.0/22 ip4:13.111.92.0/24 ip4:13.111.111.0/24 ip4:136.147.182.0/24 ip4:136.147.135.0/24 ip4:199.122.123.0/24 ip4:52.190.41.251/32 ip4:52.186.101.67/32 include:_spf.google.com include:_spf.salesforce.com include:amazonses.com -all
  • pardot142131=a8d7224e5a73428cf1410c5a287aa3e07110f0914aef4fc1cb211ae892d952bd
  • apple-domain-verification=eEgcMTRo3X5VMDdu
  • MS=000ED595EA5E55AD75F66EF2C994FAD08F3ED19A
  • U8YO9Cg2ova6yTSdX29G
  • google-site-verification=KPuabhGk2PwJEqqQOqaqaU51SVePldC5Nf1q9TW1GAQ

NS 2

  • merlin.ns.cloudflare.com
  • dana.ns.cloudflare.com

SOA 1

  • dana.ns.cloudflare.com dns.cloudflare.com

CAA 9

  • issuewild pki.goog
  • issue digicert.com
  • issuewild letsencrypt.org
  • issue pki.goog
  • issuewild digicert.com
  • issue amazon.com
  • issue letsencrypt.org
  • issue amazontrust.com
  • issuewild amazon.com

TLS Certificates (0)

None.

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for wso2.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for wso2.com <a href="https://domaindrift.io/t/wso2.com"> <img src="https://domaindrift.io/badge/wso2.com.svg" width="300" height="64" alt="DomainDrift signed observations for wso2.com"> </a>

Ed25519 Receipt

Receipt ID
1b8c189f-fd9a-4261-adc4-2432ddcf9a07
Output Hash
f8db2459d173619f19ddc4b17a24a083dbf78f627ed15282b25b6cc5db7aedb1
Signature
ed25519:774fe037fd81d8ea0cf022c9f6baec065c7c34475f2bf9c82a12b074055e41ecf3ad2ce8db3c36451731e08e560be451ac2c54a9bd4369f4a16d1f86574e4c0c
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser