CONTINUOUS INTERNET TELEMETRY24H DRIFT6,846 material changesacross 6,546 domains · +5,937 vs yesterdayDNS DRIFT434 domains changed DNS providertop destination parity.domains · +408 vs yesterdayEMAIL DRIFT91 domains switched email providertop destination google.com · +83 vs yesterdayCERT DRIFT158 domains switched issuing CA24h · +135 vs yesterdayNOW1,805 curated domains not answering-905 vs yesterdayERRORS20,948 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED92,802 throttled or blocked our scanner429 rate-limit / 403 bot-block

ris.promo

Observed Jul 22, 2026, 00:23 UTC (13h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onYandex.Cloud
Secured byLet's Encrypt
Also usesGoogle Search Console
tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ris.promo actually stands on - every host below is a signed observation
ris.promo
A / AAAA
217.28.227.218
Yandex.Cloudserves the site
NS
ns1.yandexcloud.netns2.yandexcloud.net
yandexcloud.netanswers its DNS
MX
mx1.timeweb.rumx2.timeweb.ru
timeweb.rureceives its email
TLS
ris.promo
Let's Encryptissued its certificate

DNS Records

A 1

  • 217.28.227.218

MX 2

  • 10mx1.timeweb.ru
  • 20mx2.timeweb.ru

TXT 9

  • _globalsign-domain-verification=gjbKcezSDEbm_EcHIY0p9YWuV4QNcv8kgPMqJDlza0
  • globalsign-domain-verification=r7nsj1E_KFUDmuQ58RCOHbCgMWZmIeTfVJKv6Bls5b
  • google-site-verification=Jc_XJn7Dl6RqzMOxCCpMQEEkWwYFAGP9q2hNIzXGQ2o
  • mailru-verification: 0263165f1968408d
  • google-site-verification=O63uX1Kv3nI8hYLmJVSmJuVGtPt4x_rnGmUGP5A--Fo
  • admitad-verification: 64b0ff51ba
  • v=spf1 include=_spf.yandex.net include:spf.sendsay.ru
  • yandex-verification: bd5884b020db3d26
  • v=DMARC1; p=quarantine; rua=mailto:mail@ris.promo;

NS 2

  • ns1.yandexcloud.net
  • ns2.yandexcloud.net

SOA 1

  • ns1.yandexcloud.net mx.cloud.yandex.net

TLS Certificates (3)

Common NameIssuerExpires
ris.promo C=US, O=Let's Encrypt, CN=YR1 Mon, 12 Oct 2026 15:29:19 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ris.promo. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ris.promo <a href="https://domaindrift.io/t/ris.promo"> <img src="https://domaindrift.io/badge/ris.promo.svg" width="300" height="64" alt="DomainDrift signed observations for ris.promo"> </a>

Ed25519 Receipt

Receipt ID
rcpt_30b93a2e488e9159
Output Hash
66770c0ad9369f4dab5f04dfec81b79b5a92b3592f5c2e6ed97d12e705d37bf7
Signature
ed25519:64fe8e913412b4feb5ca02411e0dcab94d9b4c486a405bcfed33dbe7ac8500e4bea2200a593a7e44ff2b1fd88b7e4d06f1bd2938a4e38845ec9cbc5433762a01
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser