CONTINUOUS INTERNET TELEMETRY24H DRIFT3,168 material changesacross 2,697 domains · -230 vs yesterdayDNS DRIFT26 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -1 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination sendgw.comCERT DRIFT9 domains switched issuing CA24h · +2 vs yesterdayNOW3,328 curated domains not answering-6,390 vs yesterdayERRORS10,953 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,168 material changesacross 2,697 domains · -230 vs yesterdayDNS DRIFT26 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -1 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination sendgw.comCERT DRIFT9 domains switched issuing CA24h · +2 vs yesterdayNOW3,328 curated domains not answering-6,390 vs yesterdayERRORS10,953 responded with an errorlast probe · 5xx / 404 / 429 / 403

opendns.com

Observed 2026-07-12T17:22:07.558Z (10h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byAmazon SES
Registered withPDR Ltd. d/b/a PublicDomainRegistry.com
Also usesDocuSignGoogle Search Console
18 subdomains · cybersecurity_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat opendns.com actually stands on - every host below is a signed observation
opendns.com
A / AAAA
146.112.62.105
Cloudflareserves the site
NS
auth3.opendns.comauth2.opendns.comauth1.opendns.com
opendns.comanswers its DNS
MX
rcdn-mx-01.cisco.comaer-mx-01.cisco.comalln-mx-01.cisco.com
Amazon SESreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → http://www.opendns.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time54 ms
DNS resolutionNOERROR
Redirect chain
http://www.opendns.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 146.112.62.105

MX 3

  • 20rcdn-mx-01.cisco.com
  • 30aer-mx-01.cisco.com
  • 10alln-mx-01.cisco.com

TXT 10

  • docusign=2dcbb085-bb7f-44b2-8cdd-c9a93a8c0514
  • _qhmqsb0grgjeq03vl0tvsnhchg7seuf
  • identrust_validate=5sxUJXEBNGIryr9TcBm31oSDJsqEiIkNIodAE18dD/xn
  • v=spf1 ptr include:_nets.opendns.com include:mail.zendesk.com include:amazonses.com include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com ip4:173.37.147.246 ip4:173.37.147.247 ip4:72.163.7.179 ip4:72.163.7.180 ip4:192.28.150.255 ?all
  • google-site-verification=1uqoSSYwOE4E7Vue1oAcKDmEt6yn5US6vuQ6shGu2dg
  • identrust_validate=dkFEA7jD1kBR9Uo9E25VVSRjPfhYSFMdX3sUWoWG28Mv
  • google-site-verification=VXNIemKQVGZ9Q3215ANNzcTDK5ZejVDwd6RQsQ2u1GI
  • 8a0qMBOOpB-h4tuZsbRSOi00ZA
  • v=DMARC1; p=none; rua=mailto:hostmaster@opendns.com
  • v=DKIM1; (detected)

NS 3

  • auth3.opendns.com
  • auth2.opendns.com
  • auth1.opendns.com

SOA 1

  • auth1.opendns.com noc.opendns.com

CAA 8

  • issue letsencrypt.org
  • issue amazon.com
  • issue digicert.com
  • issue amazonaws.com
  • issue quovadisglobal.com
  • issue identrust.com
  • issue amazontrust.com
  • issue awstrust.com

TLS Certificates (0)

None.

Subdomains (18)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for opendns.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for opendns.com <a href="https://domaindrift.io/t/opendns.com"> <img src="https://domaindrift.io/badge/opendns.com.svg" width="300" height="64" alt="DomainDrift signed observations for opendns.com"> </a>

Ed25519 Receipt

Receipt ID
6e1dee5c-18fe-4b61-b231-af122397e188
Output Hash
6a3f4e40fcd9b9905bff135f99b10f2f3cb9410826a9fb67b0985a88b1eff6f1
Signature
ed25519:267c8cb80113e605602aa6596ffe521a1e2fa7ba0fda5e975e6c95d67fc7462ffaa8936413a0640bc87262e50e7528618d3ff282e70856b91a12c99820ad8e0b
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser