hey.com unclassified

We have not verified what this backend is, so it carries no class. Stating that beats guessing: unclassified means exactly "not yet verified", never a judgment.

Backends we have not verified. The absence of intel is stated, never guessed.

Showing the last measurement, from 1 hour ago. Not a live read: we could not complete a fresh read from the signed data door. The movement numbers below are real and signed, as of 2026-10-27T23:40:33.631Z.

Email provider

Outside this lane's top movers for the window; movement below the published cap is not listed here.

Where arrivals came from

No routes in among the top published routes.

Where departures went

Cloudflare1

What the signature covers. The moves counted here are Ed25519-signed observations you can follow to a receipt and verify against the on-chain anchor, so the signature proves who recorded a move and that it was not altered. The classification is curated editorial metadata from the evidence above: a signature never proves a classification. This rollup carries per-route counts, not per-domain samples, so individual moved domains are not listed here. The change feed carries individual moves as they happen. Back to the flows board.

CONTINUOUS INTERNET TELEMETRY24H DRIFT9,058 material changesacross 402 domains · 24h to ~40m ago · +873 vs yesterdayROTATION49 domains moved DNS from magpiedns.com to koaladns.com, 47 moved backa rotation loop, not a migration · 24hREGISTRAR DRIFT2 changed registrar24hNOW1,202 curated domains not reachablelast probe, steadySITE ERRORS20,003 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 87,482 sites429 rate-limit / 403 bot-block, a posture signal