CONTINUOUS INTERNET TELEMETRY24H DRIFT2,079 material changesacross 1,948 domains · +1 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.comEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW1,138 curated domains not answeringlast probe, steadyERRORS8,946 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED24,236 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,079 material changesacross 1,948 domains · +1 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.comEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW1,138 curated domains not answeringlast probe, steadyERRORS8,946 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED24,236 throttled or blocked our scanner429 rate-limit / 403 bot-block

ctrip.com

Observed Jul 18, 2026, 12:22 UTC (12h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onHangzhou Alibaba Advertising
Secured byGlobalSign
Also usesZoomAtlassian
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ctrip.com actually stands on - every host below is a signed observation
ctrip.com
A / AAAA
8.153.170.1078.153.91.124
Hangzhou Alibaba Advertisingserves the site
NS
ns8.ctrip.comvip3.alidns.comvip4.alidns.comns4.ctrip.com+6 more
ctrip.com + alidns.comanswers its DNS
MX
mx2.ctripmail.geo.ctripgslb.netmx1.ctripmail.geo.ctripgslb.net
ctripgslb.netreceives its email
TLS
*.ctrip.com
GlobalSign nv-saissued its certificate

DNS Records

A 2

  • 8.153.170.107
  • 8.153.91.124

MX 2

  • 10mx2.ctripmail.geo.ctripgslb.net
  • 10mx1.ctripmail.geo.ctripgslb.net

TXT 9

  • jTJ6JVxDGk89xpHGk2wJrD18OxryIcY0/nk+6GxnjIPdNUPiOWsUa54t2vvxcMyMi/J1lC6UMRdxxV8QabCbZA==
  • ZOOM_verify_cCCDM1cfR9eyhWKnqLu6mA
  • adobe-idp-site-verification=7716ea4a8f83821e53d217ec962e06a29b815cfa0f81f7fc3388e5ae0c9ef58b
  • qCCEVsIHJC6vIHJOuOw1RKwolx6Utj1jIFaa+QcPHmCFkWYJa9cNAw2by45jyUbAVX9/IYuX2EW1meG/hwd7/A==
  • d02362b74e514127ba194788e80054ce
  • MS=ms62746735
  • v=spf1 include:spf.ctrip.com -all
  • atlassian-domain-verification=uix6c7QZQanqI81pLeily9VNfMddmMVHpeXWabEZgyrd32mO2nFPuyTMxXbcD9rE
  • v=DMARC1; p=reject; sp=none; rua=mailto:dmarc_reports@trip.com

NS 10

  • ns8.ctrip.com
  • vip3.alidns.com
  • vip4.alidns.com
  • ns4.ctrip.com
  • ns6.ctrip.com
  • ns3.ctrip.com
  • ns2.ctrip.com
  • ns7.ctrip.com
  • ns5.ctrip.com
  • ns1.ctrip.com

SOA 1

  • ns5.ctrip.com hostmaster.ctrip.com

SRV 1

  • xmpp.cn1.global.ctrip.com:5269 p0

TLS Certificates (2)

Common NameIssuerExpires
*.ctrip.com C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA OV SSL CA 2018 Mon, 12 Apr 2027 09:11:55 +0000
GlobalSign RSA OV SSL CA 2018 2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign Tue, 21 Nov 2028 00:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ctrip.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ctrip.com <a href="https://domaindrift.io/t/ctrip.com"> <img src="https://domaindrift.io/badge/ctrip.com.svg" width="300" height="64" alt="DomainDrift signed observations for ctrip.com"> </a>

Ed25519 Receipt

Receipt ID
48c2dbff-2388-4e14-ae88-06ec1956e180
Output Hash
0fb86211c16e286c2107139ba6b56350a16a8e13cfb97049a94707415b19e880
Signature
ed25519:9f27f5cd43ef95032961a16437d1cc59111b8a577b2b37e26cf4d7614fc3e9f63333c338537a0d7160350504c1d95a4febabacf683872605eb776e431331ab07
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser