CONTINUOUS INTERNET TELEMETRY24H DRIFT7,759 material changesacross 7,350 domains · last 24h · -2,656 vs yesterdayDNS DRIFT471 domains changed DNS providertop destination cloudflare.com · -188 vs yesterdayEMAIL DRIFT111 domains switched email providertop destination google.com · -56 vs yesterdayCERT DRIFT159 domains switched issuing CA24h · -60 vs yesterdayNOW491 curated domains not reachable-212 vs yesterdaySITE ERRORS17,419 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,735 sites429 rate-limit / 403 bot-block, a posture signal

bookmark.xxx

Observed Jul 24, 2026, 02:00 UTC (5h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Registered withDanesco Trading Ltd.
Also usesGoogle Search Console
IPv6 · 3 subdomains · tranco_10k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat bookmark.xxx actually stands on - every host below is a signed observation
bookmark.xxx
A / AAAA
172.67.170.191104.21.55.772606:4700:3033::ac43:aabf2606:4700:3030::6815:374d
Cloudflareserves the site
NS
ariella.ns.cloudflare.comcory.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
route3.mx.cloudflare.netroute2.mx.cloudflare.netroute1.mx.cloudflare.net
cloudflare.netreceives its email

HTTPS probe

redirect Redirecting (3xx) 302 → https://bookmark.xxx/en
HTTP status302
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time65 ms
DNS resolutionNOERROR
Redirect chain
https://bookmark.xxx/en

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 172.67.170.191
  • 104.21.55.77

AAAA 2

  • 2606:4700:3033::ac43:aabf
  • 2606:4700:3030::6815:374d

MX 3

  • 33route3.mx.cloudflare.net
  • 85route2.mx.cloudflare.net
  • 93route1.mx.cloudflare.net

TXT 2

  • google-site-verification=inC_AiRAPgvh7eJs4_Y1saaZrUUCXCBA8yA6X7vww5M
  • v=spf1 include:_spf.mx.cloudflare.net ~all

NS 2

  • ariella.ns.cloudflare.com
  • cory.ns.cloudflare.com

SOA 1

  • ariella.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for bookmark.xxx. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for bookmark.xxx <a href="https://domaindrift.io/t/bookmark.xxx"> <img src="https://domaindrift.io/badge/bookmark.xxx.svg" width="300" height="64" alt="DomainDrift signed observations for bookmark.xxx"> </a>

Ed25519 Receipt

Receipt ID
rcpt_6835a0d7eb10f5de
Output Hash
e8ec27cd5b62589bc7f7f0a458e761709196273c6a1532537f2489b50e3a6b15
Signature
ed25519:4f2ffda6e906d97d56f3207c36bf62512b6f39934eb5927063abf4e4ef9591713d18b412bea95387f97c30c2447b688e04e1553650f6ea69bc98429b680b9a00
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser