CONTINUOUS INTERNET TELEMETRY24H DRIFT1,810 material changesacross 1,618 domains · +388 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination yandexcloud.net · -19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -4 vs yesterdayNOW1,106 curated domains not answering+396 vs yesterdayERRORS4,988 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,738 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,810 material changesacross 1,618 domains · +388 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination yandexcloud.net · -19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -4 vs yesterdayNOW1,106 curated domains not answering+396 vs yesterdayERRORS4,988 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,738 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

pornhat.com

Observed 2026-07-18T04:49:03.666Z (5h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Registered withHosting Concepts B.V. d/b/a Registrar.eu
Also usesGoogle Search Console
IPv6 · 96 subdomains · tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat pornhat.com actually stands on - every host below is a signed observation
pornhat.com
A / AAAA
172.67.74.120104.26.5.214104.26.4.2142606:4700:20::681a:5d6+2 more
Cloudflareserves the site
NS
monika.ns.cloudflare.comjunade.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
mail.zdmedia.cz
zdmedia.czreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.pornhat.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time399 ms
DNS resolutionNOERROR
Redirect chain
https://www.pornhat.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 3

  • 172.67.74.120
  • 104.26.5.214
  • 104.26.4.214

AAAA 3

  • 2606:4700:20::681a:5d6
  • 2606:4700:20::ac43:4a78
  • 2606:4700:20::681a:4d6

MX 1

  • 10mail.zdmedia.cz

TXT 2

  • google-site-verification=XbHTLU7174TsJZZh8sbPF4Z08r3rsRoC1DuS40HLvgY
  • v=spf1 mx a:mail.zdmedia.cz ip4:185.75.76.2/32 ?all

NS 2

  • monika.ns.cloudflare.com
  • junade.ns.cloudflare.com

SOA 1

  • junade.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (96)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for pornhat.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for pornhat.com <a href="https://domaindrift.io/t/pornhat.com"> <img src="https://domaindrift.io/badge/pornhat.com.svg" width="300" height="64" alt="DomainDrift signed observations for pornhat.com"> </a>

Ed25519 Receipt

Receipt ID
5e0a6a02-b5f4-4fd1-8754-2fb691dadd91
Output Hash
39251e02895ea41f4a560f208a02a59576708eb963361894cef374a9bc4e2685
Signature
ed25519:f8bbc80baf53f1c00f8e674a6bb697f52b67d7f63f4bd3c0fa9a0e70c258b5a06531f1375b519ba648aa8dde71e067d486ccc019f6b5a772dba07d2082446306
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser