CONTINUOUS INTERNET TELEMETRY24H DRIFT1,437 material changesacross 1,292 domains · -199 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination commonmx.com · -1 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination helpsystems.com · -1 vs yesterdayNOW19,135 curated domains not answering+4,712 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,437 material changesacross 1,292 domains · -199 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination commonmx.com · -1 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination helpsystems.com · -1 vs yesterdayNOW19,135 curated domains not answering+4,712 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block

cfa2.net

Observed 2026-07-14T16:05:12.417Z (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Runs onJSC Intellin
Registered withRegistrar of Domain Names REG.RU LLC
5 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat cfa2.net actually stands on - every host below is a signed observation
cfa2.net
A / AAAA
188.94.209.231
JSC Intellinserves the site
NS
ns1.reg.runs2.reg.ru
reg.ruanswers its DNS
MX
mail.cfa2.net
cfa2.netreceives its email

HTTPS probe

timeout No response within the timeout Connection timed out - no response within 3s
HTTP status0
Servernot observed
TLS protocolnot observed
TLS issuernot observed
Behind Cloudflareno
Response time6200 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 188.94.209.231

MX 1

  • 0mail.cfa2.net

TXT 3

  • v=spf1 mx -all
  • mailru-verification: 7ade6c9267683d87
  • v=DMARC1; p=reject; rua=mailto:dmarc@cfa2.net

NS 2

  • ns1.reg.ru
  • ns2.reg.ru

SOA 1

  • ns1.reg.ru hostmaster.ns1.reg.ru

TLS Certificates (0)

None.

Subdomains (5)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cfa2.net. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for cfa2.net <a href="https://domaindrift.io/t/cfa2.net"> <img src="https://domaindrift.io/badge/cfa2.net.svg" width="300" height="64" alt="DomainDrift signed observations for cfa2.net"> </a>

Ed25519 Receipt

Receipt ID
Output Hash
52408998c6bc4174ef9d59f45550b630d0d7fda77cc98ba30932fa7a793e5ade
Signature
(no signature)
Public Key
connor-worker-v1
Parent
(genesis)
Plane
fast
Verify this in your browser