CONTINUOUS INTERNET TELEMETRY24H DRIFT154 material changesacross 106 domains · +8 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,348 curated domains not answeringlast probe, steadyERRORS28,355 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,222 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT154 material changesacross 106 domains · +8 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,348 curated domains not answeringlast probe, steadyERRORS28,355 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,222 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

rubicon.com

Observed Jul 18, 2026, 12:24 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Email byMicrosoft 365
Secured byLet's Encrypt
Also usesAtlassianDocuSignFacebook/MetaGoogle Search Console
IPv6 · 1 subdomain · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rubicon.com actually stands on - every host below is a signed observation
rubicon.com
A / AAAA
23.185.0.42620:12a:8000::42620:12a:8001::4
2620serves the site
NS
ns-1259.awsdns-29.orgns-1612.awsdns-09.co.ukns-77.awsdns-09.comns-831.awsdns-39.net
awsdns-29.org + awsdns-09.co.uk + moreanswers its DNS
MX
rubicon-com.mail.protection.outlook.com
Microsoft 365receives its email
TLS
rubicon.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 23.185.0.4

AAAA 2

  • 2620:12a:8000::4
  • 2620:12a:8001::4

MX 1

  • 0rubicon-com.mail.protection.outlook.com

TXT 16

  • _github-challenge-RubiconX-org=29d7e49bf3
  • _github-challenge-rubiconglobalip-org=cadb91342e
  • apple-domain-verification=zbfAZpHNP4jV9Kje
  • asv=5cb5c49e42cd87b8628863d83d464693
  • atlassian-domain-verification=1CSWELpKKIg7rywuukWGH2dMgIhIrq9nuYA0W4Nlq/5/WJRiZ8YID96xep9MShqq
  • docusign=14211bbf-a658-496f-b137-08ef4f436894
  • docusign=2297293b-bdef-4b3d-b67d-8ed1763c7260
  • facebook-domain-verification=0dy8a11wbkboxylyrx6rdng9xgh0r8
  • google-site-verification=M9CM_zaVwiBy8HCeDqICN3bICnS43TUmlQpBa0HAjiw
  • google-site-verification=zoHz7ngNSOeySY-ym0tuqYugUGGIei2ehehc8t7evDg

NS 4

  • ns-1259.awsdns-29.org
  • ns-1612.awsdns-09.co.uk
  • ns-77.awsdns-09.com
  • ns-831.awsdns-39.net

SOA 1

  • ns-1259.awsdns-29.org awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common NameIssuerExpires
rubicon.com C=US, O=Let's Encrypt, CN=YR2 Fri, 18 Sep 2026 08:38:08 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for rubicon.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for rubicon.com <a href="https://domaindrift.io/t/rubicon.com"> <img src="https://domaindrift.io/badge/rubicon.com.svg" width="300" height="64" alt="DomainDrift signed observations for rubicon.com"> </a>

Ed25519 Receipt

Receipt ID
62622491-7da3-4bde-a56b-2cf7c18dc800
Output Hash
b6bf68e86dafbe0d7caffa16c5838fc138d0551255bc9f80830ecc620d633afa
Signature
ed25519:40df8b6d71d7338eb45ab27874df6221766eb58aacad9c17b52d52c9e980dc7f10ffb92ceae16ee243357181cab29e1e476bab09288c94555f401731b20f6601
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser