CONTINUOUS INTERNET TELEMETRY24H DRIFT1,779 material changesacross 1,588 domains · +357 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination yandexcloud.net · -19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -4 vs yesterdayNOW1,062 curated domains not answering+352 vs yesterdayERRORS4,744 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,760 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,779 material changesacross 1,588 domains · +357 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination yandexcloud.net · -19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -4 vs yesterdayNOW1,062 curated domains not answering+352 vs yesterdayERRORS4,744 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,760 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

fairfax.com

Observed 2026-07-17T23:04:53.064Z (10h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Registered withGoDaddy.com, LLC
1 subdomain · fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat fairfax.com actually stands on - every host below is a signed observation
fairfax.com
A / AAAA
15.197.225.1283.33.251.168
Cloudflareserves the site
NS
ns26.domaincontrol.comns25.domaincontrol.com
domaincontrol.comanswers its DNS

HTTPS probe

redirect Redirecting (3xx) 301 → https://mediaoptions.com
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time391 ms
DNS resolutionNOERROR
Redirect chain
https://mediaoptions.com

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 15.197.225.128
  • 3.33.251.168

NS 2

  • ns26.domaincontrol.com
  • ns25.domaincontrol.com

SOA 1

  • ns25.domaincontrol.com dns.jomax.net

TLS Certificates (0)

None.

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for fairfax.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for fairfax.com <a href="https://domaindrift.io/t/fairfax.com"> <img src="https://domaindrift.io/badge/fairfax.com.svg" width="300" height="64" alt="DomainDrift signed observations for fairfax.com"> </a>

Ed25519 Receipt

Receipt ID
df1c282f-475d-4951-84b2-b8778b110c03
Output Hash
6e95cad33ae5a781618262e0da09f055fa70de661c3282453b89afb4421ede26
Signature
ed25519:b904caf0fac9ef1f931766a3210c8f481e14e2e07b2ed023c16eecd69e13749eff893b02342c054387abfa9ea231a0c301d5d34d54e3f32242fd71039f28ea0b
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser