CONTINUOUS INTERNET TELEMETRY24H DRIFT3,174 material changesacross 2,745 domains · -224 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,319 curated domains not answering-6,399 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,174 material changesacross 2,745 domains · -224 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,319 curated domains not answering-6,399 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 403

plausible.io

Observed 2026-07-13T00:04:08.425328711+00:00 (5h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onZenlayer
Secured byLet's Encrypt
Also usesGoogle Search Console
IPv6 · data_analytics
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat plausible.io actually stands on - every host below is a signed observation
plausible.io
A / AAAA
37.19.207.372400:52e0:1a04::925:1
Zenlayerserves the site
NS
kiki.bunny.netcoco.bunny.net
bunny.netanswers its DNS
MX
work-mx.app.hey.com
hey.comreceives its email
TLS
plausible.io
Let's Encryptissued its certificate

DNS Records

A 1

  • 37.19.207.37

AAAA 1

  • 2400:52e0:1a04::925:1

MX 1

  • 10work-mx.app.hey.com

TXT 7

  • v=spf1 include:_spf.hey.com include:helpscoutemail.com ~all
  • hey-verification:U8eWhJQxVJNrvgmwS7Gsktjg
  • ahrefs-site-verification_43e4e6dc375f45e1ba7406adb1323014acbf5c419761c1fc1b06160a6319f759
  • google-site-verification=AAozkyRHSTNGAgdhkb3ESKMnilJjFz4K_GmaWm-6eDY
  • google-site-verification=ba1I29vtD40b3ICT47-vFf2bEnQgJ4J5IdYOgok5eRI
  • google-site-verification=nKiTtNh6P680FyGuQb2czfMb33iKrDTx5rjk4qKZarI
  • v=DMARC1; p=quarantine; pct=100; rua=mailto:re+fq8pfwrvusx@dmarc.postmarkapp.com; sp=none; aspf=r;

NS 2

  • kiki.bunny.net
  • coco.bunny.net

SOA 1

  • kiki.bunny.net hostmaster.bunny.net

TLS Certificates (4)

Common NameIssuerExpires
plausible.io C=US, O=Let's Encrypt, CN=YR2 Sat, 12 Sep 2026 02:01:48 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000
ISRG Root X1 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Mon, 04 Jun 2035 11:04:38 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for plausible.io. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for plausible.io <a href="https://domaindrift.io/t/plausible.io"> <img src="https://domaindrift.io/badge/plausible.io.svg" width="300" height="64" alt="DomainDrift signed observations for plausible.io"> </a>

Ed25519 Receipt

Receipt ID
68c82463-727d-48de-8ad6-5de184fbc4a0
Output Hash
de8c619da15b71ea9dbcca63faab82e2f1538058ab2b79a837d49c4f243e7c84
Signature
ed25519:e58a4db3c7ce736a1543de12760974db8e88848f6fd56eb2c3ecb60438c45e610038c863fcdd3d5d09b1acb043903e90d112ebd9a795975e03a1249cbe36e10d
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser