mfa.gov.ua

Observed 2026-07-13T10:18:39.129Z (9h ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall

Runs onCloudflare

Email byProofpoint

Also usesGoogle Search Console

3 subdomains · tranco_40k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat mfa.gov.ua actually stands on - every host below is a signed observation

mfa.gov.ua

A / AAAA

104.18.38.47172.64.149.209

Cloudflareserves the site

tosana.ns.cloudflare.comsue.ns.cloudflare.com

cloudflare.comanswers its DNS

mxa-004f6b01.gslb.pphosted.commxb-004f6b01.gslb.pphosted.com

Proofpointreceives its email

HTTPS probe

bot_blocked Blocked our probe (WAF / bot protection) 403 blocked by cloudflare - bot protection active

HTTP status403

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time32 ms

DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

104.18.38.47
172.64.149.209

MX 2

10mxa-004f6b01.gslb.pphosted.com
10mxb-004f6b01.gslb.pphosted.com

TXT 6

_globalsign-domain-verification=lonu6mJzNnyjUYF03SWIzSvWGbdgo-i_Fd87qkp1Yj
ms-domain-verification=69d69fdf-910e-4d97-820e-943b4f69908e
google-site-verification=g_QgFGNHnuer2jvIXdB-lyZXr6OydTQLbpVRrMIuQQU
v=spf1 mx include:spf.protection.outlook.com ip4:212.26.137.15/32 ip4:88.81.238.186/32 include:spf-004f6b01.pphosted.com -all
_globalsign-domain-verification=CEaVDAdOV9SqxirMHMGAblXzokPYqK6hrT2G4vwevU
v=DMARC1; p=quarantine; rua=mailto:postmaster@mfa.gov.ua; ruf=mailto:postmaster@mfa.gov.ua; adkim=s; aspf=s; fo=1; pct=100; rf=afrf; ri=86400; sp=reject

NS 2

tosana.ns.cloudflare.com
sue.ns.cloudflare.com

SOA 1

sue.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mfa.gov.ua. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/mfa.gov.ua">
  <img src="https://domaindrift.io/badge/mfa.gov.ua.svg"
       width="300" height="64" alt="DomainDrift signed observations for mfa.gov.ua">
</a>

Ed25519 Receipt

Receipt ID: 95fafcfe-1290-4859-93e2-b70c98c81166
Output Hash: 84f37a6b12172600286290b9bfbe675fcc9321b729b1be8405a59f8199ab55b0
Signature: ed25519:89ab6bba91160a8bccea2d5292d64457ebedf1308efd149f8c4fd0aa160fb43bb568e7567f86812779d6bb247333acb9ebc7e08e6ab7d9440559f238897ecf06
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/mfa.gov.ua