CONTINUOUS INTERNET TELEMETRY24H DRIFT10,661 material changesacross 10,235 domains · +32 vs yesterdayDNS DRIFT761 domains changed DNS providertop destination parity.domains · -19 vs yesterdayEMAIL DRIFT193 domains switched email providertop destination cloudflare.net · +23 vs yesterdayCERT DRIFT218 domains switched issuing CA24h · -12 vs yesterdayNOW776 curated domains not reachable-573 vs yesterdaySITE ERRORS18,139 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED95,214 throttled or blocked our scanner429 rate-limit / 403 bot-block

fatf-gafi.org

Observed Jul 22, 2026, 00:43 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Guarded by a firewall
Runs onCloudflare
Email byMicrosoft 365
Secured byLet's Encrypt
Registered withNetwork Solutions, LLC
Also usesDocuSign
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat fatf-gafi.org actually stands on - every host below is a signed observation
fatf-gafi.org
A / AAAA
151.101.3.10151.101.67.10151.101.131.10151.101.195.10
Cloudflareserves the site
NS
ns1-03.azure-dns.comns2-03.azure-dns.netns3-03.azure-dns.orgns4-03.azure-dns.info
azure-dns.com + azure-dns.net + moreanswers its DNS
MX
fatfgafi-org01b.mail.protection.outlook.com
Microsoft 365receives its email
TLS
fatf-gafi.org
Let's Encryptissued its certificate

DNS Records

A 4

  • 151.101.3.10
  • 151.101.67.10
  • 151.101.131.10
  • 151.101.195.10

MX 1

  • 10fatfgafi-org01b.mail.protection.outlook.com

TXT 10

  • dxmyyrdjqmbgxs60dc98rrz041q5md5p
  • MS=ms25436120
  • lTkRjAqlT6hBnNFs/lwbO6frA2yzUWLnqTy2O028R1jXXUGgninlTDaW+778cNp2ntuJoVyC0C+L6jL9auRJ/w==
  • adobe-idp-site-verification=fe3732a56cceead6122113a39f9385a693c3367314cdad48789e5cfbf77d5977
  • docusign=31abf889-4b59-42fd-96ce-d222290e5da4
  • docusign=d3629c80-2125-422b-bd5b-466f0d13fe48
  • v=spf1 ip4:78.41.128.0/22 include:spf.protection.outlook.com -all
  • _uq9ur8dhn3fj9vs5jm09alo1pnivn5i
  • _s4e3veyy3qvk2fi060c6kp2wufpxrpg
  • v=DMARC1; p=reject; pct=100; rua=mailto:mailincidentreport@oecd.org; ruf=mailto:mailincidentreport@oecd.org; fo=1;

NS 4

  • ns1-03.azure-dns.com
  • ns2-03.azure-dns.net
  • ns3-03.azure-dns.org
  • ns4-03.azure-dns.info

SOA 1

  • ns1-03.azure-dns.com hostmaster.oecd.org

SRV 1

  • mail.oecd.org:443 p0

TLS Certificates (3)

Common NameIssuerExpires
fatf-gafi.org C=US, O=Let's Encrypt, CN=YR2 Mon, 19 Oct 2026 11:02:27 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for fatf-gafi.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for fatf-gafi.org <a href="https://domaindrift.io/t/fatf-gafi.org"> <img src="https://domaindrift.io/badge/fatf-gafi.org.svg" width="300" height="64" alt="DomainDrift signed observations for fatf-gafi.org"> </a>

Ed25519 Receipt

Receipt ID
rcpt_2c6132bd47b5f087
Output Hash
dba53bc6f11282ff9abf88565a4f81a82eb6dd813bfeced5160330a51b993211
Signature
ed25519:53633d4596af6149ea6c6288cf2d070407ce630afc9931ca694c5511455fdb361f16a62cf674af43e5d311d5ba37588ef91a400a6c1bde8b53aaf876322be50c
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser