CONTINUOUS INTERNET TELEMETRY24H DRIFT1,914 material changesacross 1,730 domains · -164 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination alidns.com · +2 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW2,015 curated domains not answering+889 vs yesterdayERRORS14,291 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED37,638 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,914 material changesacross 1,730 domains · -164 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination alidns.com · +2 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW2,015 curated domains not answering+889 vs yesterdayERRORS14,291 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED37,638 throttled or blocked our scanner429 rate-limit / 403 bot-block

atp.fox

Observed Jul 18, 2026, 13:17 UTC (21h ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Registered withGoDaddy Corporate Domains, LLC
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat atp.fox actually stands on - every host below is a signed observation
atp.fox
NS
ns01.dns.foxns01.foxdoua.comns02.dns.foxns02.foxdoua.com+4 more
dns.fox + foxdoua.comanswers its DNS

DNS Records

TXT 1

  • v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

NS 8

  • ns01.dns.fox
  • ns01.foxdoua.com
  • ns02.dns.fox
  • ns02.foxdoua.com
  • ns03.dns.fox
  • ns03.foxdoua.com
  • ns04.dns.fox
  • ns04.foxdoua.com

SOA 1

  • dns1.p06.nsone.net hostmaster.nsone.net

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for atp.fox. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for atp.fox <a href="https://domaindrift.io/t/atp.fox"> <img src="https://domaindrift.io/badge/atp.fox.svg" width="300" height="64" alt="DomainDrift signed observations for atp.fox"> </a>

Ed25519 Receipt

Receipt ID
c12a0c35-b454-421b-ad4b-2a85f7c1736d
Output Hash
eda0ede5495bf8f13f4af926774a50d38263913fba83af31efe71d67d11eaae3
Signature
ed25519:786137f238b084b09ed273e37d797367ee97436620309f073f4ac746bc96a896ae972adb5c73ad2300328e03ffa10a79f1477a8398ae6ebf896372f4c91c540f
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser