CONTINUOUS INTERNET TELEMETRY24H DRIFT1,939 material changesacross 1,760 domains · -612 vs yesterdayDNS DRIFT18 domains changed DNS providertop destination parity.domains · +2 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination google.com · -2 vs yesterdayCERT DRIFT2 domains switched issuing CA24h · -3 vs yesterdayNOW3,430 curated domains not answeringlast probe, steadyERRORS8,558 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,312 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,939 material changesacross 1,760 domains · -612 vs yesterdayDNS DRIFT18 domains changed DNS providertop destination parity.domains · +2 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination google.com · -2 vs yesterdayCERT DRIFT2 domains switched issuing CA24h · -3 vs yesterdayNOW3,430 curated domains not answeringlast probe, steadyERRORS8,558 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,312 throttled or blocked our scanner429 rate-limit / 403 bot-block

ecolab.com

Observed 2026-07-14T04:03:39.966Z (19h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesGoogle Search ConsoleFigmaMiroFacebook/Meta
8 subdomains · fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ecolab.com actually stands on - every host below is a signed observation
ecolab.com
A / AAAA
204.69.39.107
Cloudflareserves the site
NS
ha4.markmonitor.zoneha3.markmonitor.zoneha2.markmonitor.zoneha1.markmonitor.zone
markmonitor.zoneanswers its DNS
MX
mxa-00073f02.gslb.pphosted.commxb-00073f02.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.ecolab.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time286 ms
DNS resolutionNOERROR
Redirect chain
https://www.ecolab.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 204.69.39.107

MX 2

  • 10mxa-00073f02.gslb.pphosted.com
  • 10mxb-00073f02.gslb.pphosted.com

TXT 52

  • google-site-verification=PiCgFL6yHdmxBmLMJQ43HHMjr6NuXRyKdXMeHDs9S-w
  • ms-domain-verification=c267e038-4299-468d-a6fa-93b002600880
  • globalsign-domain-verification=zWPU60YFQ0yGYYzxisvoXHgatL_-vEWm_fmAqeVOU6
  • MS=ms92853340
  • google-site-verification=TMDCHxwa6biVHocjxI_mccBlwfjGyZoz7V5zLGRI7HY
  • 0ed1fe018a70de7c6897f94871964286e5f9751d8a
  • msfpkey=4ta0r74t97b2zlxglo5acjcor
  • d365mktkey=1lisduc6bv8zn98ummnsjtgtb
  • v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
  • apple-domain-verification=6ztuI6i7sWkFE4ZB

NS 4

  • ha4.markmonitor.zone
  • ha3.markmonitor.zone
  • ha2.markmonitor.zone
  • ha1.markmonitor.zone

SOA 1

  • ha1.markmonitor.zone domain\.registrar.ecolab.com

TLS Certificates (0)

None.

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ecolab.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ecolab.com <a href="https://domaindrift.io/t/ecolab.com"> <img src="https://domaindrift.io/badge/ecolab.com.svg" width="300" height="64" alt="DomainDrift signed observations for ecolab.com"> </a>

Ed25519 Receipt

Receipt ID
891a101c-d3ce-44b5-bcb7-7a0a63a20d40
Output Hash
efc9f3d8f80f31037acfde4742d5027592d00d8b9d38b64e787342798d9b9c13
Signature
ed25519:f7dc4997dfb802fd1d67dfe93c101c629f9ff4dc39e3e8794d08bc7c8fdb214fb08ce1836c4454f1db848c9043249d3bf5218cd616ffe06e240a4b5fe6d44400
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser