CONTINUOUS INTERNET TELEMETRY24H DRIFT8,839 material changesacross 8,692 domains · last 24h · +3,369 vs yesterdayDNS DRIFT277 domains changed DNS providertop destination cloudflare.com · +164 vs yesterdayEMAIL DRIFT54 domains switched email providertop destination outlook.comCERT DRIFT73 domains switched issuing CA24h · +47 vs yesterdayNOW557 curated domains not reachablelast probe, steadySITE ERRORS34,005 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 147,749 sites429 rate-limit / 403 bot-block, a posture signal

rlf.com

Observed Jul 26, 2026, 06:19 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Email byMimecast
Secured byLet's Encrypt
1 subdomain · majestic
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rlf.com actually stands on - every host below is a signed observation
rlf.com
A / AAAA
23.185.0.4
unattributedserves the site
NS
ns14.dnsmadeeasy.comns10.dnsmadeeasy.comns11.dnsmadeeasy.comns12.dnsmadeeasy.com+2 more
dnsmadeeasy.comanswers its DNS
MX
us-smtp-inbound-1.mimecast.comus-smtp-inbound-2.mimecast.com
Mimecastreceives its email
TLS
rlf.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 23.185.0.4

MX 2

  • 10us-smtp-inbound-1.mimecast.com
  • 10us-smtp-inbound-2.mimecast.com

TXT 8

  • perplexity-ai-domain-verification-qbxfkx=8AoHKE12cgb2CehJpzHOluAuk
  • adobe-idp-site-verification=39a31570f5cd5e8dcd0ce089067e88a5954dce2ad878fc189176f4f2fbfd6235
  • apple-domain-verification=EsLOJ2w4XFxgv0vN
  • v=spf1 ip4:160.72.62.114 ip4:160.72.62.0/27 ip4:184.75.205.224/27 ip4:160.72.62.0/27 include:_netblocks.mimecast.com -all
  • MS=ms27671057
  • duo_sso_verification=va64x7jM1do0sk3kwITLrJ5ETooVnQbqHLp5yg8gbdH2fJwTeN404m338A2b07DX
  • cisco-ci-domain-verification=656a23574582ffb2c30b737c920b36c7bc9a4aec146b83db9fdec90ef7c1acd8
  • v=DMARC1;p=reject;pct=100;rua=mailto:dmarcquarantinenotifications@rlf.com;ruf=mailto:dmarcquarantinenotifications@rlf.com;fo=1

NS 6

  • ns14.dnsmadeeasy.com
  • ns10.dnsmadeeasy.com
  • ns11.dnsmadeeasy.com
  • ns12.dnsmadeeasy.com
  • ns13.dnsmadeeasy.com
  • ns15.dnsmadeeasy.com

SOA 1

  • ns10.dnsmadeeasy.com dns.dnsmadeeasy.com

SRV 2

  • exp-e1.rlf.com:5060 p10
  • exp-e1.rlf.com:5061 p10

TLS Certificates (3)

Common NameIssuerExpires
rlf.com C=US, O=Let's Encrypt, CN=YR2 Tue, 29 Sep 2026 01:37:36 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for rlf.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for rlf.com <a href="https://domaindrift.io/t/rlf.com"> <img src="https://domaindrift.io/badge/rlf.com.svg" width="300" height="64" alt="DomainDrift signed observations for rlf.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_fc0778d283fe3f10
Output Hash
1a9267b523ac96fd2af3656606569d08c942604ce0145731c9f6a99dd9d0c918
Signature
ed25519:64b2438c8ba42c5bef60060ce18bd40d69e075a32b9835cc8f5c195fa090b5829010e6dd0f8ac8c218eafd66a2609ce395dc5e07490c323559aec1bf83efed0f
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser