CONTINUOUS INTERNET TELEMETRY24H DRIFT1,893 material changesacross 1,718 domains · -185 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination alidns.com · +2 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW2,128 curated domains not answering+1,002 vs yesterdayERRORS14,978 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED39,113 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,893 material changesacross 1,718 domains · -185 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination alidns.com · +2 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW2,128 curated domains not answering+1,002 vs yesterdayERRORS14,978 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED39,113 throttled or blocked our scanner429 rate-limit / 403 bot-block

custhelp.com

Observed Jul 18, 2026, 12:47 UTC (23h ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Registered withMarkMonitor Inc.
Also usesGoogle Search Console
tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat custhelp.com actually stands on - every host below is a signed observation
custhelp.com
A / AAAA
74.117.206.70
unattributedserves the site
NS
ednsac02.rightnowtech.comednsac01.rightnowtech.comns4.p201.dns.oraclecloud.netns1.p201.dns.oraclecloud.net+2 more
rightnowtech.com + oraclecloud.netanswers its DNS
MX
filtervipft02.rightnowtech.com
rightnowtech.comreceives its email

DNS Records

A 1

  • 74.117.206.70

MX 1

  • 10filtervipft02.rightnowtech.com

TXT 3

  • google-site-verification=kdunK9KROXUSk_Pz4Izbx__cFaujPADUf_FUvFUOlAM
  • v=spf1 include:spf-a.rnmk.com exists:%{i}.spf.rnmk.com -all
  • v=DMARC1;p=reject;rua=mailto:dmarc_rua@emaildefense.proofpoint.com;ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;fo=1

NS 6

  • ednsac02.rightnowtech.com
  • ednsac01.rightnowtech.com
  • ns4.p201.dns.oraclecloud.net
  • ns1.p201.dns.oraclecloud.net
  • ns3.p201.dns.oraclecloud.net
  • ns2.p201.dns.oraclecloud.net

SOA 1

  • dnsmasterac01.rightnowtech.com root.rightnowtech.com

CAA 2

  • issue "digicert.com"
  • issue "symantec.com"

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for custhelp.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for custhelp.com <a href="https://domaindrift.io/t/custhelp.com"> <img src="https://domaindrift.io/badge/custhelp.com.svg" width="300" height="64" alt="DomainDrift signed observations for custhelp.com"> </a>

Ed25519 Receipt

Receipt ID
b6a02144-0cc9-4dc0-9a57-8772788d4002
Output Hash
d0a5f36a0a094a347e1b683f9b815cbba9d8c8041e8fabc42caff772ecfba829
Signature
ed25519:5bfb036b8df729ca119c5d45ff615a074a2698cfb006a35ef8ec44ede467c05e4d66858207ba78011980cb9e5de51bd438c11dd624fa839b4dbd837b5c2a940d
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser