CONTINUOUS INTERNET TELEMETRY24H DRIFT43,836 material changesacross 42,208 domains · 24h to ~6h ago · -18,240 vs yesterdayROTATION55 domains moved DNS from kirklanddc.com to koaladns.com, 53 moved backa rotation loop, not a migration · 24hREGISTRAR DRIFT1 changed registrar24hNOW532 curated domains not reachablelast probe, steadySITE ERRORS33,888 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 118,377 sites429 rate-limit / 403 bot-block, a posture signal

level.ru

Observed Aug 2, 2026, 09:32 UTC (5d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of level.ru was taken 5d ago

level.ru is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting level.ru under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch level.ru Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Verify this receipt yourself + Watch this domain
Up right now
Secured byGlobalSign
3 subdomains · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat level.ru actually stands on - every host below is a signed observation
level.ru
A / AAAA
185.65.149.128
unattributedserves the site
NS
ns1.hosting.reg.runs2.hosting.reg.ru
reg.ruanswers its DNS
MX
mx01.levelgroup.rumx02.levelgroup.ru
levelgroup.rureceives its email
TLS
*.level.ru
GlobalSign nv-saissued its certificate

DNS Records

A 1

  • 185.65.149.128

MX 2

  • 10mx01.levelgroup.ru
  • 20mx02.levelgroup.ru

TXT 4

  • 5014b3c5-6026-4829-aef8-7a84f820de74
  • cc79Pk1rlVWYsU6s2PVEspp2sQBPr7-FcT8SJm8khj
  • globalsign-domain-verification=cc79Pk1rlVWYsU6s2PVEspp2sQBPr7-FcT8SJm8khj
  • v=spf1 ip4:87.242.109.25 ip4:51.250.55.29 ip4:95.213.168.3 ip4:82.202.248.42 include:spf.mail.selcloud.ru a mx ?all

NS 2

  • ns1.hosting.reg.ru
  • ns2.hosting.reg.ru

SOA 1

  • server187.hosting.reg.ru support.reg.ru

DMARC_RECORDS 1

  • v=DMARC1; p=quarantine

BIMI_RECORDS 1

  • v=BIMI1; l=https://level.ru/static/images/bimi.svg; a=;

TLS Certificates (2)

Common NameIssuerExpires
*.level.ru C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA OV SSL CA 2018 Sat, 06 Feb 2027 09:24:18 +0000
GlobalSign RSA OV SSL CA 2018 2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign Tue, 21 Nov 2028 00:00:00 +0000

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_9580aedb560f5ddc
Output Hash
9d657a342123396d3d3238f6f3a2041c045420e2c62e42edbb233780145a13f4
Signature
ed25519:9cb60da4cb8a7cfd756fd5f54348bf10d7c488329cb9f31c2f7cfc46b1440fe95eb97d6bc9e3e3f2a0cbeb8cf632697b7df9b19a84e5e9fb8aeb2d36d73ba300
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser