CONTINUOUS INTERNET TELEMETRY24H DRIFT1,718 material changesacross 1,519 domains · +296 vs yesterdayDNS DRIFT5 domains changed DNS providertop destination parity.domains · -16 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination pphosted.com · -3 vs yesterdayNOW967 curated domains not answering+257 vs yesterdayERRORS4,464 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,822 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,718 material changesacross 1,519 domains · +296 vs yesterdayDNS DRIFT5 domains changed DNS providertop destination parity.domains · -16 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination pphosted.com · -3 vs yesterdayNOW967 curated domains not answering+257 vs yesterdayERRORS4,464 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,822 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

rootcanary.net

Observed 2026-07-17T13:34:58.975583219+00:00 (18h ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Registered withHosting Concepts B.V. d/b/a Registrar.eu
tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rootcanary.net actually stands on - every host below is a signed observation
rootcanary.net
NS
ns1.zurich.surf.netns1.surfnet.nlns2.surfnet.nlns3.surfnet.nl
surf.net + surfnet.nlanswers its DNS

DNS Records

NS 4

  • ns1.zurich.surf.net
  • ns1.surfnet.nl
  • ns2.surfnet.nl
  • ns3.surfnet.nl

SOA 1

  • ns1.surfnet.nl dns-beheer.surfnet.nl

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for rootcanary.net. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for rootcanary.net <a href="https://domaindrift.io/t/rootcanary.net"> <img src="https://domaindrift.io/badge/rootcanary.net.svg" width="300" height="64" alt="DomainDrift signed observations for rootcanary.net"> </a>

Ed25519 Receipt

Receipt ID
8cf37dd4-250f-4228-b9c6-e2e799b09baf
Output Hash
7bfab91dc4f19666e822b4c716234175715ac6549d3e5f2a608d426d3721908e
Signature
ed25519:9aeb2d0c1b84993e9768c55cbe4b068bb6df4b25209d92ae3986609771620c468ebc9746eadf5014025ba4bed6f0b5441780b25f454c9f07df5184221febdd06
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser