CONTINUOUS INTERNET TELEMETRY24H DRIFT53,944 material changesacross 50,276 domains · 24h to ~2h ago · +19,327 vs yesterdaySHIFT83 domains moved DNS from koaladns.com to magpiedns.coma coordinated move · 24hNOW537 curated domains not reachablelast probe, steadySITE ERRORS33,966 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 138,941 sites429 rate-limit / 403 bot-block, a posture signal

narfu.ru

Observed Aug 2, 2026, 20:41 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of narfu.ru was taken 3d ago

narfu.ru is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting narfu.ru under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch narfu.ru Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Verify this receipt yourself + Watch this domain
Responding, no home page
Runs onPJSC Rostelecom
Secured byLet's Encrypt
16 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat narfu.ru actually stands on - every host below is a signed observation
narfu.ru
A / AAAA
78.37.98.67
PJSC Rostelecomserves the site
NS
ns.aonb.runs1.narfu.runs2.narfu.ru
aonb.ru + narfu.ruanswers its DNS
MX
mx1.narfu.ru
narfu.rureceives its email
TLS
aer.narfu.ru
Let's Encryptissued its certificate

DNS Records

A 1

  • 78.37.98.67

MX 1

  • 20mx1.narfu.ru

TXT 8

  • v=spf1 ip4:78.37.98.0/29 ip4:78.37.98.44 ip4:78.37.98.45 -all
  • MS=ms75101131
  • mailru-verification: 78e3c1bbf85f3821
  • webinar-verification=3aca383cb0d42d6d274edba815f8363a
  • yandex-verification: d39e3ed8cd11a3ae
  • adobe-idp-site-verification=289a6cdb6a47a6e55fd806b4c25334debb53965b504c2a12c4ff3aaea323de3e
  • HZeLvcjdohLLtgmZSNQWwQFlMx3RwE1hPwLuzHqC7mkuqEGUw50Rgs5CUP4KOSruQJD+cHHO082aGnaOpIGhEg==
  • _globalsign-domain-verification=XNolOrUBgaW3EsS3C1rrnPlBYsKOG-KyDkEOHOQ4WT

NS 3

  • ns.aonb.ru
  • ns1.narfu.ru
  • ns2.narfu.ru

SOA 1

  • ns1.narfu.ru admins.narfu.ru

SRV 2

  • xmpp.narfu.ru:5222 p0
  • xmpp.narfu.ru:5269 p0

CAA 6

  • issue "comodoca.com"
  • issuewild "globalsign.com"
  • issue "startcomca.com"
  • iodef "mailto:admins@narfu.ru"
  • issuewild "letsencrypt.org"
  • issue "letsencrypt.org"

DMARC_RECORDS 1

  • v=DMARC1; p=none

TLS Certificates (3)

Common NameIssuerExpires
aer.narfu.ru C=US, O=Let's Encrypt, CN=YR1 Thu, 10 Sep 2026 19:19:05 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (16)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_aed91bb036175a58
Output Hash
604632052135c05c38f64409b8b47ada4d7236b401f46f6091ceb634e2fd4545
Signature
ed25519:778524738cc094fecd6db15e4c78136933260377bf0ec156ab5c472efca904f296dcbd710c66eb4204ee84de4e284a5fe614a14a03df010f65f872c3dcb55b00
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser