CONTINUOUS INTERNET TELEMETRY24H DRIFT164 material changesacross 117 domains · +18 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,443 curated domains not answeringlast probe, steadyERRORS29,126 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED86,553 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT164 material changesacross 117 domains · +18 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,443 curated domains not answeringlast probe, steadyERRORS29,126 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED86,553 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

onclickads.net

Observed Jul 18, 2026, 13:44 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onRETN Limited
Email byGoogle Workspace
Secured byLet's Encrypt
Registered withURL Solutions, Inc.
Also usesGoogle Search Console
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat onclickads.net actually stands on - every host below is a signed observation
onclickads.net
A / AAAA
139.45.197.105
RETN Limitedserves the site
NS
ns-1454.awsdns-53.orgns-1828.awsdns-36.co.ukns-233.awsdns-29.comns-599.awsdns-10.net
awsdns-53.org + awsdns-36.co.uk + moreanswers its DNS
MX
relay.bestofpost.comalt1.aspmx.l.google.comaspmx.l.google.comalt2.aspmx.l.google.com+2 more
Google Workspacereceives its email
TLS
onclickads.net
Let's Encryptissued its certificate

DNS Records

A 1

  • 139.45.197.105

MX 6

  • 10relay.bestofpost.com
  • 20alt1.aspmx.l.google.com
  • 20aspmx.l.google.com
  • 30alt2.aspmx.l.google.com
  • 40aspmx2.googlemail.com
  • 40aspmx3.googlemail.com

TXT 4

  • google-site-verification=as-KapaYVK2jCoBKEg6KcjNLuTE_1JIgn_cxaeyRhSY
  • google-site-verification=ubPkl-vaPLzeoPtmg8ZMLuhK5SjDrQVv9Q_Vc_LrYuU
  • v=spf1 a mx include:_spf.elasticemail.com ~all
  • yandex-verification: 5e5a8461267e4e02

NS 4

  • ns-1454.awsdns-53.org
  • ns-1828.awsdns-36.co.uk
  • ns-233.awsdns-29.com
  • ns-599.awsdns-10.net

SOA 1

  • ns-599.awsdns-10.net awsdns-hostmaster.amazon.com

TLS Certificates (2)

Common NameIssuerExpires
onclickads.net C=US, O=Let's Encrypt, CN=R13 Tue, 25 Aug 2026 08:11:05 +0000
R13 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Fri, 12 Mar 2027 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for onclickads.net. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for onclickads.net <a href="https://domaindrift.io/t/onclickads.net"> <img src="https://domaindrift.io/badge/onclickads.net.svg" width="300" height="64" alt="DomainDrift signed observations for onclickads.net"> </a>

Ed25519 Receipt

Receipt ID
396abb5b-08a4-435b-b321-a0b355f20801
Output Hash
16244bfd7fa3cd994efe57558ea6ba41c624b36e9ff2727c21e4d7ada8fd76e1
Signature
ed25519:2574b9239fdc8e2f0b28a4d2201749b4ea0c4055001f69a40c584afa83703792b531b9d902f2266ce338752faa5eddc6f70cdd00a22988a2d92a9e504ab0440b
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser