CONTINUOUS INTERNET TELEMETRY24H DRIFT1,767 material changesacross 1,592 domains · -311 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination alidns.com · +1 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · -2 vs yesterdayCERT DRIFT37 domains switched issuing CA24h · -9 vs yesterdayNOW2,145 curated domains not answering+1,019 vs yesterdayERRORS15,095 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED39,396 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,767 material changesacross 1,592 domains · -311 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination alidns.com · +1 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · -2 vs yesterdayCERT DRIFT37 domains switched issuing CA24h · -9 vs yesterdayNOW2,145 curated domains not answering+1,019 vs yesterdayERRORS15,095 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED39,396 throttled or blocked our scanner429 rate-limit / 403 bot-block

hextra.cloud

Observed Jul 19, 2026, 11:18 UTC (1h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byAmazon SES
4 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat hextra.cloud actually stands on - every host below is a signed observation
hextra.cloud
A / AAAA
15.160.64.78
Cloudflareserves the site
NS
ns3.hextra.cloudns2.hextra.cloudns1.hextra.cloudns4.hextra.cloud
hextra.cloudanswers its DNS
MX
mx-02-eu-central-1.prod.hydra.sophos.commx-01-eu-central-1.prod.hydra.sophos.com
Amazon SESreceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time590 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 15.160.64.78

MX 2

  • 20mx-02-eu-central-1.prod.hydra.sophos.com
  • 10mx-01-eu-central-1.prod.hydra.sophos.com

TXT 3

  • sophos-domain-verification=7699563fc653b82e3657ecbda6bb2101e0de8c6a
  • v=spf1 ip4:15.161.172.61 ip4:35.152.36.35 ip4:18.102.47.33 ip4:46.28.24.90 ip4:46.28.24.91 ip4:46.28.24.92 ip4:46.28.24.93 ip4:46.28.24.94 a:posta.hextra.it a:smtp.hextra.it include:amazonses.com ~all
  • v=DMARC1; p=none

NS 4

  • ns3.hextra.cloud
  • ns2.hextra.cloud
  • ns1.hextra.cloud
  • ns4.hextra.cloud

SOA 1

  • ns1.hextra.cloud awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for hextra.cloud. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for hextra.cloud <a href="https://domaindrift.io/t/hextra.cloud"> <img src="https://domaindrift.io/badge/hextra.cloud.svg" width="300" height="64" alt="DomainDrift signed observations for hextra.cloud"> </a>

Ed25519 Receipt

Receipt ID
50e10e72-fb83-47d0-a422-feabcf3bef5f
Output Hash
921ece12faf4e2b354e74f8ca25084564d73fa36dc6f879d4f930c9c4524df46
Signature
ed25519:97f358e5502c39ae995cf998c761eeb7b4857bb3075f5f4fc970b3af81e29c5f2322a69dc5be4860167dbb9d4fbef930c90cf01cfcd2c1e89db29f82696fcb03
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser