CONTINUOUS INTERNET TELEMETRY24H DRIFT3,163 material changesacross 2,698 domains · last 24h · -7,252 vs yesterdayDNS DRIFT161 domains changed DNS providertop destination cloudflare.com · -498 vs yesterdayEMAIL DRIFT21 domains switched email providertop destination google.com · -146 vs yesterdayCERT DRIFT36 domains switched issuing CA24h · -183 vs yesterdayNOW408 curated domains not reachable-295 vs yesterdaySITE ERRORS17,637 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 100,621 sites429 rate-limit / 403 bot-block, a posture signal

amrtf.org

Observed Jul 20, 2026, 10:07 UTC (4d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Email byGoogle Workspace
Secured byAmazon
Also usesGoogle Search Console
tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat amrtf.org actually stands on - every host below is a signed observation
amrtf.org
A / AAAA
35.81.97.24835.82.210.18844.239.111.13234.209.230.84
unattributedserves the site
NS
kurt.ns.cloudflare.comserena.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.com+1 more
Google Workspacereceives its email
TLS
amrtf.org
Amazonissued its certificate

DNS Records

A 4

  • 35.81.97.248
  • 35.82.210.188
  • 44.239.111.132
  • 34.209.230.84

MX 5

  • 1aspmx.l.google.com
  • 20alt1.aspmx.l.google.com
  • 30alt2.aspmx.l.google.com
  • 40aspmx2.googlemail.com
  • 50aspmx3.googlemail.com

TXT 7

  • MS=6CA2FF988291DC9DAA986D278253B40595BA1C41
  • brevo-code:db541363282b222b79bc74e5bb4b131f
  • google-site-verification=I1GUrTLq8-DvU19OKHDhZmhaDd9n1IlPOXbRoA4pV8g
  • google-site-verification=zTIBQfcms8srdDEwfEFwZX3tk9D7NDNj--Yj7l69pP8
  • v=spf1 mx ip4:52.32.94.117/32 ip4:31.22.4.235 include:_spf.google.com ~all
  • v=DMARC1; p=quarantine; rua=mailto:850c3cf76c96.a@dmarcinput.com,mailto:webmaster@amrtf.org,mailto:rua@dmarc.brevo.com; ruf=mailto:850c3cf76c96.f@dmarcinput.com; adkim=s; aspf=s; fo=1; pct=100
  • v=BIMI1;l=https://www.amrtf.org/zh-hant/amrtf/image/logo_registered_color_dark_bg_tiny_ps3.svg

NS 2

  • kurt.ns.cloudflare.com
  • serena.ns.cloudflare.com

SOA 1

  • kurt.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common NameIssuerExpires
amrtf.org C=US, O=Amazon, CN=Amazon RSA 2048 M01 Tue, 24 Nov 2026 23:59:59 +0000
Amazon RSA 2048 M01 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:21:28 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for amrtf.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for amrtf.org <a href="https://domaindrift.io/t/amrtf.org"> <img src="https://domaindrift.io/badge/amrtf.org.svg" width="300" height="64" alt="DomainDrift signed observations for amrtf.org"> </a>

Ed25519 Receipt

Receipt ID
rcpt_2efc932e9a7eb67c
Output Hash
1f29febc5531298ee4199379b347953179f6b3c60cd7d63bdf980e1df1e61e71
Signature
ed25519:f529412a9b2b8c3f1981befe97c0496e4a7d6c07ace12648021a3ddf83d35a4c147ad0bf8c2943b738913aac2947d22ad4a30097bd4ef7ecd5b371c8ef5c3b05
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser