CONTINUOUS INTERNET TELEMETRY24H DRIFT1,998 material changesacross 1,791 domains · -553 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,379 curated domains not answeringlast probe, steadyERRORS10,877 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT1,998 material changesacross 1,791 domains · -553 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,379 curated domains not answeringlast probe, steadyERRORS10,877 responded with an errorlast probe · 5xx / 404 / 429 / 403

rafael.com

Observed 2026-07-13T18:40:17.437Z (9h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
IPv6 · 96 subdomains · aerospace
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rafael.com actually stands on - every host below is a signed observation
rafael.com
A / AAAA
74.207.241.24523.239.4.93192.155.84.2362600:3c01::f03c:95ff:fe91:5de5+2 more
Cloudflareserves the site
NS
yangguang.ns.giantpanda.comdamao.ns.giantpanda.com
giantpanda.comanswers its DNS
MX
mail.mailerhost.net
mailerhost.netreceives its email

HTTPS probe

ok Responding normally (2xx) 204 OK
HTTP status204
Servercloudflare
TLS protocolHTTP/3
TLS issuernot observed
Behind Cloudflareyes
Response time41 ms
DNS resolutionNOERROR
MCP This domain advertises an AI service endpoint at _mcp._tcp.
v=spf1 ip6:fd43:c0d1:c090::/48 -all

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 3

  • 74.207.241.245
  • 23.239.4.93
  • 192.155.84.236

AAAA 3

  • 2600:3c01::f03c:95ff:fe91:5de5
  • 2600:3c01::f03c:95ff:feeb:5ed6
  • 2600:3c01::2000:3aff:feb3:2e94

MX 1

  • 1mail.mailerhost.net

TXT 4

  • v=spf1 ip6:fd43:c0d1:c090::/48 -all
  • v=spf1 ip6:fd43:c0d1:c090::/48 -all
  • v=DKIM1; (detected)
  • v=spf1 ip6:fd43:c0d1:c090::/48 -all

NS 2

  • yangguang.ns.giantpanda.com
  • damao.ns.giantpanda.com

SOA 1

  • damao.ns.giantpanda.com admin.giantpanda.com

TLS Certificates (0)

None.

Subdomains (96)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for rafael.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for rafael.com <a href="https://domaindrift.io/t/rafael.com"> <img src="https://domaindrift.io/badge/rafael.com.svg" width="300" height="64" alt="DomainDrift signed observations for rafael.com"> </a>

Ed25519 Receipt

Receipt ID
5dea9e58-bd8c-45d4-857c-d2e72590acfc
Output Hash
ce5bbaa108253065ff74520dba7c9760f24e933316e5c6b4b867613237fd5912
Signature
ed25519:4710bdd10f49877ea137179834870a4c998d0b910e1cc0e50357ab8fad7469ae257000c2a9d3da8c8b73c4a2a974db500d8dea4df2198460b5f044c0187d5305
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser