CONTINUOUS INTERNET TELEMETRY24H DRIFT228 material changesacross 34 domains · last 24h · +68 vs yesterdayNOW532 curated domains not reachable+30 vs yesterdaySITE ERRORS34,058 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 150,430 sites429 rate-limit / 403 bot-block, a posture signal

refundmoney.org

Observed Jul 28, 2026, 09:44 UTC (20h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Up right now
Secured byLet's Encrypt
Also usesGoogle Search Console
1 subdomain · majestic
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat refundmoney.org actually stands on - every host below is a signed observation
refundmoney.org
A / AAAA
87.249.38.179
unattributedserves the site
NS
ns2.timeweb.runs3.timeweb.orgns4.timeweb.orgns1.timeweb.ru
timeweb.ru + timeweb.organswers its DNS
MX
emx.mail.ru
mail.rureceives its email
TLS
refundmoney.org
Let's Encryptissued its certificate

DNS Records

A 1

  • 87.249.38.179

MX 1

  • 10emx.mail.ru

TXT 3

  • google-site-verification=BTIOhCdjGsEQzGL_mBzSl9atXjZgihSrz1sZSqZvfhY
  • v=spf1 redirect=_spf.mail.ru
  • v=DMARC1;p=none

NS 4

  • ns2.timeweb.ru
  • ns3.timeweb.org
  • ns4.timeweb.org
  • ns1.timeweb.ru

SOA 1

  • ns1.timeweb.ru dns.timeweb.ru

TLS Certificates (3)

Common NameIssuerExpires
refundmoney.org C=US, O=Let's Encrypt, CN=YR2 Wed, 23 Sep 2026 09:45:05 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for refundmoney.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for refundmoney.org <a href="https://domaindrift.io/t/refundmoney.org"> <img src="https://domaindrift.io/badge/refundmoney.org.svg" width="300" height="64" alt="DomainDrift signed observations for refundmoney.org"> </a>

Ed25519 Receipt

Receipt ID
rcpt_f4099ae6e6d75291
Output Hash
42311a7206e41d93d018f124f9a4613752124a2d518a2bb1d04323c0c915df18
Signature
ed25519:3de011a7cec563ad0ae7ab3adf6f4980252a09d3ede862ef8db7fa157709ce77b5a6190dd958b6f380d174df2aa9149295f42c0eabc81cf79c1d4ce420255703
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser