CONTINUOUS INTERNET TELEMETRY24H DRIFT7,759 material changesacross 7,350 domains · last 24h · -2,656 vs yesterdayDNS DRIFT470 domains changed DNS providertop destination cloudflare.com · -189 vs yesterdayEMAIL DRIFT111 domains switched email providertop destination google.com · -56 vs yesterdayCERT DRIFT157 domains switched issuing CA24h · -62 vs yesterdayNOW497 curated domains not reachable-206 vs yesterdaySITE ERRORS17,415 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,747 sites429 rate-limit / 403 bot-block, a posture signal

l3.net

Observed Jul 24, 2026, 01:25 UTC (5h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Not responding
Runs onLevel 3 Parent
Email byProofpoint
Registered withMarkMonitor Inc.
tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat l3.net actually stands on - every host below is a signed observation
l3.net
A / AAAA
4.68.80.110
Level 3 Parentserves the site
NS
ns1.Level3.netdnsmgr2.Level3.netns1.l3.netns2.l3.net+1 more
level3.net + l3.netanswers its DNS
MX
mx0a-007e5801.pphosted.commx0b-007e5801.pphosted.com
Proofpointreceives its email

DNS Records

A 1

  • 4.68.80.110

MX 2

  • 10mx0a-007e5801.pphosted.com
  • 10mx0b-007e5801.pphosted.com

TXT 6

  • 27 APR 07 - 15:57:52
  • _n3ikzaa90go9z6amlmj9oqyq7jxqkmz
  • xqg4cqyzv6nwryvxz3fjc78g5vx6p1pd
  • v=spf -all
  • _o2r4neu68bzvanwdxnzdhdyvrrvix1m
  • v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

NS 5

  • ns1.Level3.net
  • dnsmgr2.Level3.net
  • ns1.l3.net
  • ns2.l3.net
  • ns2.Level3.net

SOA 1

  • ns2.Level3.net dns.Level3.net

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for l3.net. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for l3.net <a href="https://domaindrift.io/t/l3.net"> <img src="https://domaindrift.io/badge/l3.net.svg" width="300" height="64" alt="DomainDrift signed observations for l3.net"> </a>

Ed25519 Receipt

Receipt ID
rcpt_72562a3232a1f47c
Output Hash
1be4de090a9e59354ee1eeec9e09ea7a4afe4faa436ec105e26abf4d873c1622
Signature
ed25519:88a96c9fae1ea826732cf54bdc202c54d3af1a538aab412cf9d81c1df404471d0dabd8a79d5ebb3ee09a896bc54346f8eef12461eafceb2a95706159e2e66f08
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser