CONTINUOUS INTERNET TELEMETRY24H DRIFT163 material changesacross 116 domains · +17 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,427 curated domains not answeringlast probe, steadyERRORS28,816 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,874 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT163 material changesacross 116 domains · +17 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,427 curated domains not answeringlast probe, steadyERRORS28,816 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,874 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

threatseeker.com

Observed Jul 18, 2026, 13:03 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Registered withCorsearch Domains LLC
tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat threatseeker.com actually stands on - every host below is a signed observation
threatseeker.com
NS
ns-r.blackspider.comns-a.blackspider.comns-g.blackspider.com
blackspider.comanswers its DNS
MX
cluster-y.mailcontrol.comcluster-z.mailcontrol.com
mailcontrol.comreceives its email

DNS Records

MX 2

  • 20cluster-y.mailcontrol.com
  • 10cluster-z.mailcontrol.com

NS 3

  • ns-r.blackspider.com
  • ns-a.blackspider.com
  • ns-g.blackspider.com

SOA 1

  • mon01j.srv.mailcontrol.com hostmaster.blackspider.com

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for threatseeker.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for threatseeker.com <a href="https://domaindrift.io/t/threatseeker.com"> <img src="https://domaindrift.io/badge/threatseeker.com.svg" width="300" height="64" alt="DomainDrift signed observations for threatseeker.com"> </a>

Ed25519 Receipt

Receipt ID
40091d55-8e78-4f64-a6dd-384cbed6a4c9
Output Hash
9afc637c528e60fd1ee6824823138d041e5d3a3dee97b2728e17fd5cd109e051
Signature
ed25519:4c23bd5108bc7d84944570ad5aaea0ad4a665806aaf11ce559cef300ed9fdd1a1ea0a580b724223f40dc75dd0faa5d81b08787abe9155d21d2c7f1a9ad53c30d
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser