CONTINUOUS INTERNET TELEMETRY24H DRIFT6,210 material changesacross 5,780 domains · last 24h · -4,205 vs yesterdayDNS DRIFT373 domains changed DNS providertop destination cloudflare.com · -286 vs yesterdayEMAIL DRIFT90 domains switched email providertop destination google.com · -77 vs yesterdayCERT DRIFT128 domains switched issuing CA24h · -91 vs yesterdayNOW451 curated domains not reachable-252 vs yesterdaySITE ERRORS17,350 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,652 sites429 rate-limit / 403 bot-block, a posture signal

principal.com

Observed Jul 24, 2026, 02:39 UTC (8h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onFastly
Email byProofpoint
Secured byDigiCert
Registered withNetwork Solutions, LLC
Also usesAtlassianGoogle Search ConsoleFacebook/MetaZoomStripeMiro
IPv6 · 1 subdomain · fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat principal.com actually stands on - every host below is a signed observation
principal.com
A / AAAA
23.185.0.22620:12a:8001::22620:12a:8000::2
Fastlyserves the site
NS
svl-ans-01.inet.qwest.netauth111.ns.uu.netauth120.ns.uu.netdca-ans-01.inet.qwest.net
qwest.net + uu.netanswers its DNS
MX
mxb-002f7901.gslb.pphosted.commxa-002f7901.gslb.pphosted.com
Proofpointreceives its email
TLS
www.principal.com
DigiCert Incissued its certificate

DNS Records

A 1

  • 23.185.0.2

AAAA 2

  • 2620:12a:8001::2
  • 2620:12a:8000::2

MX 2

  • 10mxb-002f7901.gslb.pphosted.com
  • 10mxa-002f7901.gslb.pphosted.com

TXT 54

  • _w1zbpsrs23owbno9rds66a0iq0x49pb
  • atlassian-domain-verification=XHdp3RKrZs2+vebIYOd3d3oOVQclHUdnxAG/xTqFjVZfU4CMIbeDShNPYLf5Qc76
  • amazonses:/W88mug6mVLYMDjxBp17XeOufH2O8lUEBN35MukpyuE=
  • Dynatrace-site-verification=d4ec047a-af20-4871-83a2-5bd2c8750f06__ndpqqno2eu41fl3fr1jb52hab0
  • amazonses:FYcZQrr3aB2UG3WQfmS1md1j571PRxaGHGTIIehQW60=
  • openai-domain-verification=dv-IgEAHgG9PLbU9zoSoE1KdAJv
  • _sqdzp6ceis6gk8i6i2u61ukebryl4pv
  • amazonses:uXtY7WvzXHFaXyhqkwxCMPlUE1p+5pg/Zk8DzfP6+QM=
  • _mqqx3cjc0aesvhnu05jm9m0t8xi8hhd
  • flexera-domain-verification-idnjbimmrvzvqcth

NS 4

  • svl-ans-01.inet.qwest.net
  • auth111.ns.uu.net
  • auth120.ns.uu.net
  • dca-ans-01.inet.qwest.net

SOA 1

  • ns1.principal.com dns.principal.com

SRV 1

  • autodiscover.principal.com:443 p0

TLS Certificates (2)

Common NameIssuerExpires
www.principal.com C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 Fri, 18 Dec 2026 23:59:59 +0000
DigiCert Global G2 TLS RSA SHA256 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Sat, 29 Mar 2031 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for principal.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for principal.com <a href="https://domaindrift.io/t/principal.com"> <img src="https://domaindrift.io/badge/principal.com.svg" width="300" height="64" alt="DomainDrift signed observations for principal.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_e4d64b28a9403759
Output Hash
e2626d88199ab54d13b1052150252a7d8446774e3ea18539dc74c4fbeb324cf6
Signature
ed25519:29842ffb59359ff681797e7d1f6e725dab990fed5b5264499f84b42d0082c85e43d2050c3c2ace084b81ee5eb6fa1d04621e365cbe4410fba1140108bd14f808
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser