CONTINUOUS INTERNET TELEMETRY24H DRIFT7,759 material changesacross 7,350 domains · last 24h · -2,656 vs yesterdayDNS DRIFT470 domains changed DNS providertop destination cloudflare.com · -189 vs yesterdayEMAIL DRIFT111 domains switched email providertop destination google.com · -56 vs yesterdayCERT DRIFT157 domains switched issuing CA24h · -62 vs yesterdayNOW497 curated domains not reachable-206 vs yesterdaySITE ERRORS17,415 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,747 sites429 rate-limit / 403 bot-block, a posture signal

shopping.com

Observed Jul 24, 2026, 01:46 UTC (5h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Guarded by a firewall
Runs oneBay
Secured bySectigo
Registered withMarkMonitor Inc.
13 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat shopping.com actually stands on - every host below is a signed observation
shopping.com
A / AAAA
209.140.136.174209.140.139.216209.140.136.11766.211.162.142+2 more
eBayserves the site
NS
dns2.p06.nsone.netdns4.p06.nsone.netdns1.p06.nsone.netdns3.p06.nsone.net+4 more
nsone.net + ebaydns.comanswers its DNS
TLS
at.shopping.com
Sectigo Limitedissued its certificate

DNS Records

A 6

  • 209.140.136.174
  • 209.140.139.216
  • 209.140.136.117
  • 66.211.162.142
  • 66.211.166.110
  • 66.211.163.107

TXT 2

  • _zyhymohjbjdnfg6mkc986j56khgtkq8
  • v=DMARC1; p=reject; rua=mailto:ebay@rua.agari.com; ruf=mailto:ebay@ruf.agari.com; fo=1; rf=afrf; pct=100

NS 8

  • dns2.p06.nsone.net
  • dns4.p06.nsone.net
  • dns1.p06.nsone.net
  • dns3.p06.nsone.net
  • ns01.ebaydns.com
  • ns02.ebaydns.com
  • ns03.ebaydns.com
  • ns04.ebaydns.com

SOA 1

  • dns1.p06.nsone.net hostmaster.ebay.com

CAA 1

  • issue "digicert.com"

TLS Certificates (5)

Common NameIssuerExpires
at.shopping.com C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R40 Wed, 21 Oct 2026 23:59:59 +0000
Sectigo Public Server Authentication CA OV R40 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Sun, 13 May 2040 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000
USERTrust RSA Certification Authority C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Sun, 31 Dec 2028 23:59:59 +0000
AAA Certificate Services C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Sun, 31 Dec 2028 23:59:59 +0000

Subdomains (13)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for shopping.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for shopping.com <a href="https://domaindrift.io/t/shopping.com"> <img src="https://domaindrift.io/badge/shopping.com.svg" width="300" height="64" alt="DomainDrift signed observations for shopping.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_8336996cbc7e39b5
Output Hash
541af28a1bb918a6e987e0a91d7eb5e4b7a87992389b870dd65653746f525edd
Signature
ed25519:b41c2ed49577a97057a21998878ce997102b6a24bb4e0d4a90a8a197b854e72d0eddaee31f3f71ed1f439b85a05a6011d9044708fa7199646f7a35e4ae639706
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser