CONTINUOUS INTERNET TELEMETRY24H DRIFT2,666 material changesacross 2,423 domains · +1,757 vs yesterdayDNS DRIFT179 domains changed DNS providertop destination parity.domains · +153 vs yesterdayEMAIL DRIFT36 domains switched email providertop destination outlook.com · +28 vs yesterdayCERT DRIFT68 domains switched issuing CA24h · +45 vs yesterdayNOW2,382 curated domains not answering-328 vs yesterdayERRORS22,997 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED91,081 throttled or blocked our scanner429 rate-limit / 403 bot-block

halo.run

Observed Jul 22, 2026, 00:55 UTC (4h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Secured byGoogle Trust Services
Registered withDNSPod, Inc.
Also usesGoogle Search Console
IPv6 · 1 subdomain · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat halo.run actually stands on - every host below is a signed observation
halo.run
A / AAAA
104.21.43.113172.67.178.1402606:4700:3035::6815:2b712606:4700:3036::ac43:b28c
Cloudflareserves the site
NS
isla.ns.cloudflare.commarek.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
mxbiz2.qq.commxbiz1.qq.com
qq.comreceives its email
TLS
halo.run
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 104.21.43.113
  • 172.67.178.140

AAAA 2

  • 2606:4700:3035::6815:2b71
  • 2606:4700:3036::ac43:b28c

MX 2

  • 10mxbiz2.qq.com
  • 5mxbiz1.qq.com

TXT 4

  • OSSRH-86415
  • google-site-verification=gRZYnaYWUQXWLvov-54i4W4-SdWlhwJt46uHU2q0eIs
  • gradle-verification=546M69HJK64MI1QBDRMVR3PJN52KE
  • v=spf1 include:spf.mail.qq.com ~all

NS 2

  • isla.ns.cloudflare.com
  • marek.ns.cloudflare.com

SOA 1

  • isla.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common NameIssuerExpires
halo.run C=US, O=Google Trust Services, CN=WE1 Fri, 09 Oct 2026 06:01:20 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for halo.run. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for halo.run <a href="https://domaindrift.io/t/halo.run"> <img src="https://domaindrift.io/badge/halo.run.svg" width="300" height="64" alt="DomainDrift signed observations for halo.run"> </a>

Ed25519 Receipt

Receipt ID
rcpt_73b2701c994ef14c
Output Hash
6eedf386b96b5cb100210ef379996726e9cbf54224960b64a0a0229c98e29768
Signature
ed25519:2c922ae2263e4da9ee81fa076eba5e041c6b6eab1480ad1905dbee398665483d3ea4f30456fd9783cf3274af329a61f6d03978dce3c5490f6fe9bb5ed4cc1a06
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser