CONTINUOUS INTERNET TELEMETRY24H DRIFT1,406 material changesacross 1,179 domains · +952 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination pphosted.com · +5 vs yesterdayNOW340 curated domains not answering-1,875 vs yesterdayERRORS2,377 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,245 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,406 material changesacross 1,179 domains · +952 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination pphosted.com · +5 vs yesterdayNOW340 curated domains not answering-1,875 vs yesterdayERRORS2,377 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,245 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

mrf.io

Observed 2026-07-17T12:59:36.141420330+00:00 (7h ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Runs onFastly
Secured byGlobalSign
Also usesGoogle Search Console
tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat mrf.io actually stands on - every host below is a signed observation
mrf.io
A / AAAA
151.101.130.207151.101.2.207151.101.194.207151.101.66.207
Fastlyserves the site
NS
ns-105.awsdns-13.comns-1457.awsdns-54.orgns-1834.awsdns-37.co.ukns-655.awsdns-17.net
awsdns-13.com + awsdns-54.org + moreanswers its DNS
MX
inbound-smtp.eu-west-1.amazonaws.com
amazonaws.comreceives its email
TLS
mrf.io
GlobalSign nv-saissued its certificate

DNS Records

A 4

  • 151.101.130.207
  • 151.101.2.207
  • 151.101.194.207
  • 151.101.66.207

MX 1

  • 10inbound-smtp.eu-west-1.amazonaws.com

TXT 4

  • _globalsign-domain-verification=XDoFXILIsbNXk4wO5FOXicvMUfz9Vmmi8PEIZhZHQs
  • _globalsign-domain-verification=n0b8SvOmFjFo5XsQryM_ctBNsI3-rVwKtYMU7d5YlX
  • google-site-verification=t3ZbYE3LxdqdXkKX1Zm3uskhpNXdXUa3tyxV7uHI4wk
  • v=DMARC1; p=none; sp=none; rua=mailto:dmarc@marfeel.com

NS 4

  • ns-105.awsdns-13.com
  • ns-1457.awsdns-54.org
  • ns-1834.awsdns-37.co.uk
  • ns-655.awsdns-17.net

SOA 1

  • ns-1457.awsdns-54.org awsdns-hostmaster.amazon.com

TLS Certificates (2)

Common NameIssuerExpires
mrf.io C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2026 Q1 Sat, 06 Mar 2027 17:00:26 +0000
GlobalSign Atlas R3 DV TLS CA 2026 Q1 2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign Fri, 15 Oct 2027 00:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mrf.io. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for mrf.io <a href="https://domaindrift.io/t/mrf.io"> <img src="https://domaindrift.io/badge/mrf.io.svg" width="300" height="64" alt="DomainDrift signed observations for mrf.io"> </a>

Ed25519 Receipt

Receipt ID
3e9410ec-fa5c-4f6a-aba5-7bbb37af005e
Output Hash
370ae18771c13a9469560557050d0209936ee64668d68ed5371c037148473ebc
Signature
ed25519:8ae58c6db304a4cbd739cc08b2b4ec0adbb1062f44e3a3219c04f2afded3ba8aa9ccd94c33be7c28eab40955bd4d79c10f9a9cd093762575dcafbfa8de59960e
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser