orderbook.net

Observed Sep 4, 2026, 23:07 UTC (just now). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Not responding
Registered withNetwork Solutions, LLC
100 subdomains · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
DRIFTwhat moved on orderbook.net in the last day, each reading signed
  • 2h agoReachability changed (HTTP 502 → HTTP 200)
  • 4h agoReachability changed (HTTP 200 → HTTP 502)
  • 7h agoReachability changed (HTTP 200 → HTTP 502)
  • 11h agoNameserver removed: ztomy.com · Email routing removed
  • 15h agoReachability changed (HTTP 200 → HTTP 502)

Watch it to get the next change the moment it lands.

HTTPS probe

Timed out No response within the timeout Connection timed out - no response within 3s
HTTP status0
Servernot observed
TLS protocolnot observed
TLS issuernot observed
Behind Cloudflareno
Time spent waiting6,200 ms (2 attempts, 3s each) - nothing answered
DNS resolutionNOERROR
What this reading means

Nothing answered on 443 inside our budget: 2 attempts of 3s each, from Cloudflare's network. DNS resolved, so the name and its delegation are fine - the failure is below that, at the connection or HTTP layer.

It does NOT mean the site is down for everyone. Our budget is deliberately tight so a two-million-domain sweep stays affordable, and a site that is merely slow will miss it while working fine in a browser.

Probed from Cloudflare's network. A site can be healthy and still not answer us: use the live checks on the domain page to run the same probe from your own network and compare.

What produces this, in rough order of how often
  • The origin takes longer than 3s to send its first byte - real users see this as a slow site, not a broken one.
  • A firewall DROPS our packets rather than refusing them. A refusal would have come back as "connection refused"; silence is what a drop rule looks like from outside.
  • Traffic from datacenter or cloud networks is filtered. We egress from Cloudflare, which many origins treat differently from a residential connection.
  • An AAAA record is published for an address that is not actually serving, so clients that prefer IPv6 hang.
  • The origin only answers browser-like requests. We identify ourselves as DomainDrift rather than impersonating a browser.

These are the known causes, not a diagnosis of this domain. We recorded that nothing answered; we did not measure why.

MCP This domain advertises an AI service endpoint at _mcp._tcp.
1 endpoint - withheld

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

SIGNED-OUT VIEW Provider names, posture and counts are shown. The record values - every DNS answer, each subdomain hostname, raw TXT, IPs, cert names and WHOIS - are the product. Sign in for the full signed record, or use the API with a key.

DNS records 9

A1NS2MX1TXT4SOA1

TLS certificates 0

None.

Subdomains 100

100 subdomain hostnames observed and signed - the list itself is part of the paid record.

WILDCARD DNSobserved 2026-09-04 23:07 UTC

DomainDrift asked this domain for one hostname that nobody ever registered, and it answered. A domain that answers invented hostnames is running wildcard DNS. It is common and usually deliberate. A SaaS platform gives every customer a subdomain this way. How the check works

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt
Ed25519 receiptthe raw cryptographic proof
Receipt ID
rcpt_ba9423bbf75b262a
Output Hash
61205205b0c7f1598a8eb7d82bd740ccc957e897b80c02dd60dc02b638f36a0d
Signature
ed25519:363dd0c062e3202c37dd3be13386430ffed0bc5d35f6f3cf372560497340fb91acba9284258b7e09d82267b1975bb9113391d21163cb3f026748581593639d0e
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
CONTINUOUS INTERNET TELEMETRY24H DRIFT4,709 material changesacross 2,831 domains · 24h to ~2h ago · -25,128 vs yesterdayROTATION61 domains moved DNS from koaladns.com to magpiedns.com, 60 moved backa rotation loop, not a migration · 24hNOW587 curated domains not reachablelast probe, steadySITE ERRORS17,431 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 79,477 sites429 rate-limit / 403 bot-block, a posture signal