CONTINUOUS INTERNET TELEMETRY24H DRIFT160 material changesacross 113 domains · +14 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,370 curated domains not answeringlast probe, steadyERRORS28,505 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,469 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT160 material changesacross 113 domains · +14 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,370 curated domains not answeringlast probe, steadyERRORS28,505 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,469 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

catonet.works

Observed Jul 18, 2026, 10:01 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Email byMicrosoft 365
Registered withGandi SAS
Also usesGoogle Search Console
tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat catonet.works actually stands on - every host below is a signed observation
catonet.works
NS
ns-1227.awsdns-25.orgns-1962.awsdns-53.co.ukns-812.awsdns-37.netns-508.awsdns-63.com
awsdns-25.org + awsdns-53.co.uk + moreanswers its DNS
MX
catonet-works.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

server_error Server error (5xx) 530 Server Error
HTTP status530
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time10 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

MX 1

  • 0catonet-works.mail.protection.outlook.com

TXT 13

  • globalsign-domain-verification=d8e5b335e0627df09913aebe5e519261
  • v=spf1 include:spf.protection.outlook.com ip4:54.228.76.98 ip4:54.73.77.216 ip4:52.17.110.194 ip4:18.200.152.211 ip4:54.72.83.3 ip4:34.252.37.163 ip4:54.217.7.147 ip4:52.17.0.196 ip4:34.248.117.212 ip4:54.74.204.104 ip4:13.48.215.219 ip4:16.170.184.63 ip4:13.48.151.5 ip4:44.215.46.181 ip4:44.218.239.53 ip4:52.16.19.38 ip4:52.48.8.43 -all
  • globalsign-domain-verification=7F7F088B078698391002BF56E77EAA96
  • ml9lo1rfnfs354hfap1p8depld
  • LA79RHIMU99B8NUAOO5HNQMO1K
  • google-site-verification=g9Ug-LzLhs2pjLlOVVT8yaYCBGJ5HHN90XLHr73ddLc
  • globalsign-domain-verification=B1EB841C30881396819BDC43DDDB3E6B
  • htso4ma8abopa17c4ps2hh3fci
  • qb1r80qehslrqbnkd3r5iv4dl3
  • globalsign-domain-verification=1b043312d780d53089814b36a2fa27d5

NS 4

  • ns-1227.awsdns-25.org
  • ns-1962.awsdns-53.co.uk
  • ns-812.awsdns-37.net
  • ns-508.awsdns-63.com

SOA 1

  • ns-508.awsdns-63.com awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for catonet.works. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for catonet.works <a href="https://domaindrift.io/t/catonet.works"> <img src="https://domaindrift.io/badge/catonet.works.svg" width="300" height="64" alt="DomainDrift signed observations for catonet.works"> </a>

Ed25519 Receipt

Receipt ID
02e103c9-c36c-4e62-b192-1bf80def4bf0
Output Hash
00c153b470289893cc664068721abe43ab923254e654ecac4b92b567a414bbe5
Signature
ed25519:bc088df451d26c9181466896ee3f9403773282f3f0ab3109d76ab01844ccd6754ca6f75f3836ea5c872a0c14d0ffe4bbded97fd870f125d14cceb65279172d02
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser