CONTINUOUS INTERNET TELEMETRY24H DRIFT10,870 material changesacross 10,483 domains · +241 vs yesterdayDNS DRIFT766 domains changed DNS providertop destination parity.domains · -14 vs yesterdayEMAIL DRIFT183 domains switched email providertop destination outlook.com · +13 vs yesterdayCERT DRIFT228 domains switched issuing CA24h · -2 vs yesterdayNOW1,100 curated domains not reachable-249 vs yesterdaySITE ERRORS18,971 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED95,218 throttled or blocked our scanner429 rate-limit / 403 bot-block

rfs.ru

Observed Jul 22, 2026, 01:07 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onPJSC MegaFon
Secured byGlobalSign
Also usesGoogle Search Console
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rfs.ru actually stands on - every host below is a signed observation
rfs.ru
A / AAAA
178.176.229.212
PJSC MegaFonserves the site
NS
ns1.rfs-system.runs2.rfs-system.runs3-l2.nic.runs4-l2.nic.ru+3 more
rfs-system.ru + nic.ruanswers its DNS
MX
mx1.atmosphere.facct.rumx2.atmosphere.facct.rumail1.rfs.rumail2.rfs.ru
facct.ru + rfs.rureceives its email
TLS
*.rfs.ru
GlobalSign nv-saissued its certificate

DNS Records

A 1

  • 178.176.229.212

MX 4

  • 10mx1.atmosphere.facct.ru
  • 10mx2.atmosphere.facct.ru
  • 20mail1.rfs.ru
  • 20mail2.rfs.ru

TXT 18

  • 760871c8-8d4d-492d-8810-2e1fbe36428f
  • mailru-verification: f9d57bc5f4c91451
  • 2020120907300356m9h518ji281uajg3n53mjqqcdqfdd8w2ochdxqbk3snu8r8v
  • 2021112521190420v7qw444rrydscpwbaw17rwdu6cp8w3j8yb8o1zzv0da6fnik
  • google-site-verification=Q02VfB5zEtwOCmjsuV_sSK0LSc_oqrsI8bgKfhuvTT8
  • google-site-verification=xPHxwNUf_I2gWZmBRcZtbF_Hsv9q9Cfrn9cTC-8FaAw
  • _globalsign-domain-verification=6ZKkHpF9LRmfu8eoFI-nKuQjH29dIDASBEcaiQmkPk
  • _globalsign-domain-verification=EissgxhfSkIHDpUeeyTl16ACdvR14ZNmcZivjDNJ77
  • _globalsign-domain-verification=EnfnN85ovOiz4k_aLwn1irXzZGNg81UTX3rQM39pJl
  • _globalsign-domain-verification=IJxaPKtAL63E9oWSOK1ZsWFdU8_O4vcBBubmARuoJU

NS 7

  • ns1.rfs-system.ru
  • ns2.rfs-system.ru
  • ns3-l2.nic.ru
  • ns4-l2.nic.ru
  • ns8-l2.nic.ru
  • ns4-cloud.nic.ru
  • ns8-cloud.nic.ru

SOA 1

  • ns3-l2.nic.ru nagornyy.rfs.ru

TLS Certificates (3)

Common NameIssuerExpires
*.rfs.ru C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R3 DV TLS CA 2020 Tue, 23 Feb 2027 14:51:41 +0000
GlobalSign GCC R3 DV TLS CA 2020 2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign Sun, 18 Mar 2029 00:00:00 +0000
GlobalSign 2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign Sun, 18 Mar 2029 10:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for rfs.ru. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for rfs.ru <a href="https://domaindrift.io/t/rfs.ru"> <img src="https://domaindrift.io/badge/rfs.ru.svg" width="300" height="64" alt="DomainDrift signed observations for rfs.ru"> </a>

Ed25519 Receipt

Receipt ID
rcpt_0f60785ca4545611
Output Hash
5b79d582522c7fac81cec5f42cb5ca5640e7223342cac27c0fe959e6de8ca30b
Signature
ed25519:9739446d929dbff1913ee08b713d4de71c6589ce05a34e7ad27e51cad89984d6472b7479508a4e5520667f689456d957159483e4382069591fdd6047ca859506
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser