CONTINUOUS INTERNET TELEMETRY24H DRIFT2,045 material changesacross 1,844 domains · -506 vs yesterdayDNS DRIFT12 domains changed DNS providertop destination afternic.com · -4 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,394 curated domains not answeringlast probe, steadyERRORS10,893 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,045 material changesacross 1,844 domains · -506 vs yesterdayDNS DRIFT12 domains changed DNS providertop destination afternic.com · -4 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,394 curated domains not answeringlast probe, steadyERRORS10,893 responded with an errorlast probe · 5xx / 404 / 429 / 403

es.net

Observed 2026-07-13T13:25:28.619Z (23h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Registered withAmazon Registrar, Inc.
Also usesGoogle Search ConsoleAtlassian
IPv6 · 9 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat es.net actually stands on - every host below is a signed observation
es.net
A / AAAA
198.128.136.1352001:400:210:87::85
Cloudflareserves the site
NS
adns1.es.netadns2.es.net
es.netanswers its DNS
MX
mail.es.netnmx1.es.net
es.netreceives its email

HTTPS probe

redirect Redirecting (3xx) 302 → https://www.es.net/
HTTP status302
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time359 ms
DNS resolutionNOERROR
Redirect chain
https://www.es.net/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 198.128.136.135

AAAA 1

  • 2001:400:210:87::85

MX 2

  • 50mail.es.net
  • 30nmx1.es.net

TXT 10

  • google-site-verification=dFSMYhlXI68-brxVB1_UeTi_SE5hXtcNoC1DLi-6imE
  • openai-domain-verification=dv-GG7QMh8fprxlDvIq6R5COyrI
  • 2f1904af-fb1f-4e91-b20b-e5d4644049d8
  • linkedin-site-verification=bc9147c1-c1a9-4d6f-bce2-f65b40d74052
  • v=spf1 include:spf1.es.net include:spf2.es.net ~all
  • google-site-verification=7uiHM6762bVXWQfgVaAiu2zcI5djHHuZSiEfXKUL4qA
  • atlassian-domain-verification=iHrMi1fpHAiXFodV8CSRQZjgnI9vUj6kbYUF6wZqM/1B2M4h941RKQSf25abfAE/
  • v=DMARC1;p=none;rua=mailto:dmarc-rua@es.net;ruf=mailto:dmarc-ruf@es.net
  • v=DKIM1; (detected)
  • v=DNSSEC1; (detected)

NS 2

  • adns1.es.net
  • adns2.es.net

SOA 1

  • ns1.es.net hostmaster.es.net

TLS Certificates (0)

None.

Subdomains (9)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for es.net. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for es.net <a href="https://domaindrift.io/t/es.net"> <img src="https://domaindrift.io/badge/es.net.svg" width="300" height="64" alt="DomainDrift signed observations for es.net"> </a>

Ed25519 Receipt

Receipt ID
5fd04665-c738-4495-bb7b-f2141f3d9925
Output Hash
9837b285039298c30517a146f7d1c2bf68e2710c646b70b9671609ef4686f9ac
Signature
ed25519:f9c59f4924f8fe44142166562392a2d0252af566096ead56aa69e15938d6ab4a71916a972bcd5b346ff64aed29707884ea5fcfa8098d53bed06683261ddee20e
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser