CONTINUOUS INTERNET TELEMETRY24H DRIFT44,038 material changesacross 42,351 domains · 24h to ~5h ago · -18,038 vs yesterdayROTATION56 domains moved DNS from kirklanddc.com to koaladns.com, 53 moved backa rotation loop, not a migration · 24hREGISTRAR DRIFT1 changed registrar24hNOW535 curated domains not reachablelast probe, steadySITE ERRORS33,899 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 118,551 sites429 rate-limit / 403 bot-block, a posture signal

dnswatch.com

Observed Aug 2, 2026, 14:15 UTC (4d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of dnswatch.com was taken 4d ago

dnswatch.com is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting dnswatch.com under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch dnswatch.com Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Up right now
Secured byLet's Encrypt
tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat dnswatch.com actually stands on - every host below is a signed observation
dnswatch.com
A / AAAA
24.113.41.84
unattributedserves the site
NS
ns1.he.netns1.1command.comns2.he.netns3.he.net+6 more
he.net + 1command.com + moreanswers its DNS
MX
mx99.ultimatedns.net
ultimatedns.netreceives its email
TLS
dnswatch.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 24.113.41.84

MX 1

  • 90mx99.ultimatedns.net

TXT 1

  • v=spf1 mx -all

NS 10

  • ns1.he.net
  • ns1.1command.com
  • ns2.he.net
  • ns3.he.net
  • ns4.he.net
  • ns5.he.net
  • puck.nether.net
  • udns.ultimatedns.net
  • demon.dnswatch.com
  • demon0.dnswatch.org

SOA 1

  • demon.dnswatch.com noc.dnswatch.com

CAA 1

  • issue "letsencrypt.org"

DMARC_RECORDS 1

  • v=DMARC1; p=reject; rua=mailto:dkim@dnswatch.com; adkim=s; aspf=s

TLS Certificates (3)

Common NameIssuerExpires
dnswatch.com C=US, O=Let's Encrypt, CN=R13 Sun, 23 Aug 2026 20:04:36 +0000
dnswatch.com C=US, O=Let's Encrypt, CN=R13 Sun, 23 Aug 2026 20:04:36 +0000
R13 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Fri, 12 Mar 2027 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_06795d370e4fcbdd
Output Hash
94be34156fabcaac1a9f92dc0c711a5466e18e536434115791eb06bcd855729c
Signature
ed25519:fb7f43fe8ab5022398073362dd95ac43baefe68a9fabb1f7b380c39f7f0ffcf54c0ed927f28b80727bbf69b7fe008b5f6c633572ca37f5a1aee8ab8c5a5c4f07
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser