CONTINUOUS INTERNET TELEMETRY24H DRIFT310 material changesacross 175 domains · +164 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination ns2 · +1 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW3,607 curated domains not answering-727 vs yesterdayERRORS26,932 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED89,823 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brNo nameservers in the latest observation24H DRIFT310 material changesacross 175 domains · +164 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination ns2 · +1 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW3,607 curated domains not answering-727 vs yesterdayERRORS26,932 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED89,823 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brNo nameservers in the latest observation

oncf.ma

Observed Jul 21, 2026, 17:10 UTC (33m ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Signed observation on record.
tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat oncf.ma actually stands on - every host below is a signed observation
oncf.ma
A / AAAA
41.137.246.194
unattributedserves the site
NS
barid.oncf.mabarid-casa.oncf.ma
oncf.maanswers its DNS
MX
mailrelay2.oncf.mamailrelay1.oncf.ma
oncf.mareceives its email

DNS Records

A 1

  • 41.137.246.194

MX 2

  • 30mailrelay2.oncf.ma
  • 10mailrelay1.oncf.ma

TXT 3

  • v=spf1 ip4:41.137.246.215 ip4:194.204.225.245 ip4:41.137.207.195 include:spf.protection.outlook.com -all
  • MS=ms30283950
  • v=DMARC1; p=reject; rua=mailto:60e45ed9@inbox.ondmarc.com; ruf=mailto:60e45ed9@inbox.ondmarc.com; fo=1; pct=100

NS 2

  • barid.oncf.ma
  • barid-casa.oncf.ma

SOA 1

  • barid.oncf.ma please_set_email.absolutely.nowhere

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for oncf.ma. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for oncf.ma <a href="https://domaindrift.io/t/oncf.ma"> <img src="https://domaindrift.io/badge/oncf.ma.svg" width="300" height="64" alt="DomainDrift signed observations for oncf.ma"> </a>

Ed25519 Receipt

Receipt ID
rcpt_d8cce9d70246808d
Output Hash
812c42c68a8d6c10a1a1309051095863f94e75f696eb7a4cd6b8efd75db87b6e
Signature
ed25519:56e92e01f213c2ebc2f537b89104e115082e20238f8854fd320f99638c3185f2afaa6662d894136562e0ded809b24bcaf8e6f0d501b1298069e26a6e15a0bf0b
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser