CONTINUOUS INTERNET TELEMETRY24H DRIFT3,043 material changesacross 2,698 domains · -355 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination cloudflare.com · -2 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,043 material changesacross 2,698 domains · -355 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination cloudflare.com · -2 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 403

mail.ru

Observed 2026-07-13T00:06:00.591159248+00:00 (12h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onLLC VK
Secured byHellenic Academic and Research Institutions CA
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat mail.ru actually stands on - every host below is a signed observation
mail.ru
A / AAAA
185.180.201.190.156.232.489.221.239.1
LLC VKserves the site
NS
ns2.mail.runs1.mail.ru
mail.ruanswers its DNS
MX
mxs.mail.ru
mail.rureceives its email
TLS
*.mail.ru
Hellenic Academic and Research Institutions CAissued its certificate

DNS Records

A 3

  • 185.180.201.1
  • 90.156.232.4
  • 89.221.239.1

MX 1

  • 10mxs.mail.ru

TXT 8

  • HARICA-0D8ZO64AiWoNsbcOYD7
  • _globalsign-domain-verification=x4Mv_wznaGVeJceyWvEwGr5yWx4t6Omvxx4h0ICVAA
  • v=spf1 redirect=_spf.mail.ru
  • _globalsign-domain-verification=Si3zyfQkRVz-8n5vDXd_qWZ4EmgkzHHeRVFuRGz4IP
  • HARICA-zOgPcgJHt0kof3WT4rF
  • v=DMARC1;p=reject;rua=mailto:dmarc_rua@corp.mail.ru;
  • v=spf1 a mx include:_spf.mail.ru -all
  • v=STSv1; id=20200303T120000;

NS 2

  • ns2.mail.ru
  • ns1.mail.ru

SOA 1

  • ns1.mail.ru hostmaster.mail.ru

SRV 5

  • autodiscover.mail.ru:443 p10
  • imap.mail.ru:993 p0
  • smtp.mail.ru:25 p30
  • smtp.mail.ru:587 p10
  • smtp.mail.ru:2525 p20

CAA 4

  • issue "harica.gr"
  • issue "letsencrypt.org"
  • issue "globalsign.com"
  • issue "visa.com"

TLS Certificates (3)

Common NameIssuerExpires
*.mail.ru C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA DV TLS RSA Sun, 03 Jan 2027 11:28:47 +0000
HARICA DV TLS RSA C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021 Sat, 15 Mar 2036 09:24:03 +0000
HARICA TLS RSA Root CA 2021 C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2015 Fri, 31 Aug 2029 07:41:54 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mail.ru. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for mail.ru <a href="https://domaindrift.io/t/mail.ru"> <img src="https://domaindrift.io/badge/mail.ru.svg" width="300" height="64" alt="DomainDrift signed observations for mail.ru"> </a>

Ed25519 Receipt

Receipt ID
254fe58d-7552-4e49-937b-69157d64f365
Output Hash
fbcaca564c38117fc3071c4b65cdca967ba9728c6a43fda181f1d062e7013f12
Signature
ed25519:b39db8d6bfb19ddbc50e54f30aee998aaba6ab74c0d6cb76cbfe198b0fcee394a22e7ec298437c6cd9c84d2f9ad95784a9b23d37fe7d8eecee92781ab966e10c
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser