CONTINUOUS INTERNET TELEMETRY24H DRIFT228 material changesacross 148 domains · +82 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,697 curated domains not answering+363 vs yesterdayERRORS30,474 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,605 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brNo nameservers in the latest observation24H DRIFT228 material changesacross 148 domains · +82 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,697 curated domains not answering+363 vs yesterdayERRORS30,474 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,605 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brNo nameservers in the latest observation

emarsys.net

Observed Jul 18, 2026, 12:45 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Secured byAmazon
Also usesGoogle Search Console
tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat emarsys.net actually stands on - every host below is a signed observation
emarsys.net
A / AAAA
18.203.70.14934.253.55.74
Cloudflareserves the site
NS
ns3.dnsmadeeasy.comns2.dnsmadeeasy.comns0.dnsmadeeasy.comns4.dnsmadeeasy.com+1 more
dnsmadeeasy.comanswers its DNS
MX
return0.emarsys.netreturn1.emarsys.net
emarsys.netreceives its email
TLS
*.emarsys.net
Amazonissued its certificate

DNS Records

A 2

  • 18.203.70.149
  • 34.253.55.74

MX 2

  • 10return0.emarsys.net
  • 10return1.emarsys.net

TXT 22

  • google-site-verification=nY7jC0D1BJn4Rr0aKl9FUJY-PasdJynM9hH97XDpL40
  • v=spf1 ip4:91.211.240.0/22 ip4:194.113.24.0/22 ip4:195.54.172.0/23 ip4:185.4.120.0/22 include:s.emarsys.net ~all
  • google-site-verification=ra1Gr_ASG4HZVbrsC_F5hokW0qzpXMStNUqoRVjX6zE
  • google-site-verification=_p-0Fr_KxDRayFgbGEi8g1KKwzSlOrx0Ck7E4ZLzRyo
  • google-site-verification=xFn846_qxw9OejLUFdPNisj1dUxdssg9OJOtJe09X54
  • google-site-verification=ndYtbraCRf-5e38UfaPUWQvO61MF-nYzX2m5Q2N0vfA
  • MS=ms21895661
  • google-site-verification=H_L1fR5wpb0dVYO0gBfGqk10_y1lXqzqjp_UMiCk6r4
  • google-site-verification=wpajPrTR0mey1soN0GYD6waYvwGo0YvBCMpi_zhFkYo
  • yahoo-verification-key=R30ne1JepKt3npaRVuYTOXwEZWKcLW71uIqhUs0fXK8=

NS 5

  • ns3.dnsmadeeasy.com
  • ns2.dnsmadeeasy.com
  • ns0.dnsmadeeasy.com
  • ns4.dnsmadeeasy.com
  • ns1.dnsmadeeasy.com

SOA 1

  • ns10.digicertdns.com dns.digicertdns.com

TLS Certificates (3)

Common NameIssuerExpires
*.emarsys.net C=US, O=Amazon, CN=Amazon RSA 2048 M01 Sun, 31 Jan 2027 23:59:59 +0000
Amazon RSA 2048 M01 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:21:28 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for emarsys.net. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for emarsys.net <a href="https://domaindrift.io/t/emarsys.net"> <img src="https://domaindrift.io/badge/emarsys.net.svg" width="300" height="64" alt="DomainDrift signed observations for emarsys.net"> </a>

Ed25519 Receipt

Receipt ID
da76036a-5f08-4cbf-83a5-9556fbf43550
Output Hash
a6b4f5f0d846c7099fae864ca04557a750a955e0bc0fe48df6e184fca8a69a90
Signature
ed25519:353f19242cdfbc8332f3800b54bbd224945ac4a1e3e6724e1f67b35a17f4ac2223810fc5dafb34364dccb9b583c6b4cf3fc4339f259df8c60761bbcfdb582a02
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser