iem.sh

Last scanned 3m ago; the signed record is unchanged since 11d ago. Every field below carries an Ed25519 signature from that last reading. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Up right now
Runs onACONET
Secured byLet's Encrypt
tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
DRIFT

Steady. No change on record for iem.sh in the last day; this reading matches the one before it. The steady record is signed like every other reading. Watch it to catch the next move the moment it lands.

SIGNED-OUT VIEW Provider names, posture and counts are shown. The record values - every DNS answer, each subdomain hostname, raw TXT, IPs, cert names and WHOIS - are the product. Sign in for the full signed record, or use the API with a key.

DNS records 10

A1NS3MX1TXT1CAA3SOA1

TLS certificates 4

Issued byLet's Encrypt
ExpiresFri, 02 Oc (35d)
Certificate nameswithheld

Subdomains 0

None observed.

WILDCARD DNSobserved 2026-08-28 04:23 UTC

DomainDrift asked this domain for one hostname that nobody ever registered, and it answered. A domain that answers invented hostnames is running wildcard DNS. It is common and usually deliberate. A SaaS platform gives every customer a subdomain this way. How the check works

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt
Ed25519 receiptthe raw cryptographic proof
Receipt ID
rcpt_97ebb31616a0714d
Output Hash
17590a9633131b864001418789ef82b09a7b5bc63e8335102d0d7559819e2a3b
Signature
ed25519:9f7ef4a5e89e51215b459286d1bc21cb2af0353a51c8930e8980711f00a88df67aa35710fee49b5a5f1d58b9428f4bbb84ffb4fd505599942c14ccb3870c0108
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
CONTINUOUS INTERNET TELEMETRY24H DRIFT4,046 material changesacross 2,536 domains · 24h to ~75m ago · +28 vs yesterdayROTATION53 domains moved DNS from kirklanddc.com to koaladns.com, 49 moved backa rotation loop, not a migration · 24hREGISTRAR DRIFT1 changed registrar24hNOW578 curated domains not reachablelast probe, steadySITE ERRORS17,806 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 78,623 sites429 rate-limit / 403 bot-block, a posture signal