CONTINUOUS INTERNET TELEMETRY24H DRIFT438 material changesacross 400 domains · -220 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,206 curated domains not answering+377 vs yesterdayERRORS21,287 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED58,873 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT438 material changesacross 400 domains · -220 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,206 curated domains not answering+377 vs yesterdayERRORS21,287 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED58,873 throttled or blocked our scanner429 rate-limit / 403 bot-block

black.host

Observed Jul 18, 2026, 18:49 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Registered withNameCheap, Inc.
Also usesGoogle Search ConsoleFacebook/MetaDocker
IPv6 · 10 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat black.host actually stands on - every host below is a signed observation
black.host
A / AAAA
172.66.40.97172.66.43.1592606:4700:3108::ac42:28612606:4700:3108::ac42:2b9f
Cloudflareserves the site
NS
hal.ns.black.hostdave.ns.black.host
black.hostanswers its DNS
MX
hermes.mx.black.host
black.hostreceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time307 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 172.66.40.97
  • 172.66.43.159

AAAA 2

  • 2606:4700:3108::ac42:2861
  • 2606:4700:3108::ac42:2b9f

MX 1

  • 4hermes.mx.black.host

TXT 10

  • _9in0fnsnnv8uv38lsezqadw2ksrvalq
  • v=spf1 include:_spf.myorderbox.com a mx ip4:2.59.22.202 ip4:185.142.236.181 ip4:2.59.22.141 ip4:5.100.152.0/26 -all
  • google-site-verification=0z_fy4r-nbNSMPK_GNh0PFMedidO5T4oNhZbS7H66x8
  • facebook-domain-verification=3nteq0ut219mtu4nio4l2x0kzxoxj8
  • SERVERHUNTER-9HX3TVZ9
  • docker-verification=30116f2b-2139-407a-a948-37cdf2936cfe
  • postman-domain-verification=87f67860465d5b2ab5298ca1419f1bd7358f5ace9409ec268c7d024b98fb735b0fdf5f42fe8c37e65e913f1debd607726edef9e59bdae3c1211a24a6a0cf47af
  • v=DMARC1; p=reject; pct=100; rua=mailto:55cb89b143004105945ee087ac5b30d3@dmarc-reports.cloudflare.net; ruf=mailto:reports@black.host;
  • v=DKIM1; (detected)
  • v=DNSSEC1; (detected)

NS 2

  • hal.ns.black.host
  • dave.ns.black.host

SOA 1

  • dave.ns.black.host dns.cloudflare.com

CAA 10

  • issue digicert.com; cansignhttpexchanges=yes
  • issuewild letsencrypt.org
  • issue letsencrypt.org
  • issue ssl.com
  • issue pki.goog; cansignhttpexchanges=yes
  • issuewild ssl.com
  • issuewild digicert.com; cansignhttpexchanges=yes
  • issuewild pki.goog; cansignhttpexchanges=yes
  • issuewild comodoca.com
  • issue comodoca.com

TLS Certificates (0)

None.

Subdomains (10)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for black.host. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for black.host <a href="https://domaindrift.io/t/black.host"> <img src="https://domaindrift.io/badge/black.host.svg" width="300" height="64" alt="DomainDrift signed observations for black.host"> </a>

Ed25519 Receipt

Receipt ID
23581828-24d7-41d5-a39e-f136257c65db
Output Hash
277387f5861c5fc6519178cb8aea10fda9d1cef67c3e9586f5dc2b89f6220b88
Signature
ed25519:767e5f126519d28c0d9e92cdc4a291df7b502cc73372b6ab9761855486a4c1d0f4ad8b71745453f15bc8ccda6dbb54633afec6ecbf507193445d0c7d7941c409
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser