CONTINUOUS INTERNET TELEMETRY24H DRIFT2,490 material changesacross 2,352 domains · last 24h · -6,344 vs yesterdayDNS DRIFT87 domains changed DNS providertop destination cloudflare.com · -190 vs yesterdayEMAIL DRIFT19 domains switched email providertop destination outlook.com · -35 vs yesterdayCERT DRIFT25 domains switched issuing CA24h · -48 vs yesterdayNOW495 curated domains not reachable-62 vs yesterdaySITE ERRORS34,133 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 144,461 sites429 rate-limit / 403 bot-block, a posture signal

refo24.ru

Observed Jul 28, 2026, 05:04 UTC (15h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Secured byLet's Encrypt
Also usesFacebook/Meta
IPv6 · 1 subdomain · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat refo24.ru actually stands on - every host below is a signed observation
refo24.ru
A / AAAA
85.193.91.2492a03:6f01:1:2::1227
2a03serves the site
NS
ganz.ns.cloudflare.comkristina.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
mx.yandex.net
yandex.netreceives its email
TLS
refo24.ru
Let's Encryptissued its certificate

DNS Records

A 1

  • 85.193.91.249

AAAA 1

  • 2a03:6f01:1:2::1227

MX 1

  • 10mx.yandex.net

TXT 3

  • facebook-domain-verification=zwszjuv62wjwj1p8g27avdw24pqq9g
  • v=spf1 ip4:87.236.16.26 ip4:45.84.226.139 ip4:85.193.91.249 include:mxsspf.sendpulse.com include:_spf.yandex.net include:_spf.cheapsender.email include:spf.unisender.com ~all
  • v=DMARC1; p=quarantine; rua=mailto:no-reply@refo24.ru

NS 2

  • ganz.ns.cloudflare.com
  • kristina.ns.cloudflare.com

SOA 1

  • ganz.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common NameIssuerExpires
refo24.ru C=US, O=Let's Encrypt, CN=YR1 Fri, 28 Aug 2026 15:45:34 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for refo24.ru. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for refo24.ru <a href="https://domaindrift.io/t/refo24.ru"> <img src="https://domaindrift.io/badge/refo24.ru.svg" width="300" height="64" alt="DomainDrift signed observations for refo24.ru"> </a>

Ed25519 Receipt

Receipt ID
rcpt_016ca2cb734a5b0e
Output Hash
1a1f2f2119c1cf7fd94bd90d3f29b9c2a016f719e99fa915989ca44faca135e7
Signature
ed25519:e250c71a2c0d952ac7d8e8329722bef2e1e5d220bb4293c773c30137a7a5738c2d8a790f786863ada252bcd48fed09e85e6b984a83c14f9a5cf9b978d979200e
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser