CONTINUOUS INTERNET TELEMETRY24H DRIFT6,644 material changesacross 6,482 domains · last 24h · -2,190 vs yesterdayDNS DRIFT185 domains changed DNS providertop destination cloudflare.com · -92 vs yesterdayEMAIL DRIFT46 domains switched email providertop destination outlook.com · -8 vs yesterdayCERT DRIFT63 domains switched issuing CA24h · -10 vs yesterday

rubyist.run

Observed Jul 27, 2026, 04:30 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Secured byLet's Encrypt
domcop
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rubyist.run actually stands on - every host below is a signed observation
rubyist.run
A / AAAA
185.199.108.153
unattributedserves the site
NS
dns16.hichina.comdns15.hichina.com
hichina.comanswers its DNS
MX
hzmx02.mxmail.netease.comhzmx01.mxmail.netease.com
netease.comreceives its email
TLS
rubyist.run
Let's Encryptissued its certificate

DNS Records

A 1

  • 185.199.108.153

MX 2

  • 10hzmx02.mxmail.netease.com
  • 5hzmx01.mxmail.netease.com

TXT 2

  • v=spf1 include:spf.163.com -all
  • v=DMARC1; p=quarantine; fo=1; ruf=mailto:dmarc@qiye.163.com; rua=mailto:dmarc_report@qiye.163.com

NS 2

  • dns16.hichina.com
  • dns15.hichina.com

SOA 1

  • dns15.hichina.com hostmaster.hichina.com

TLS Certificates (3)

Common NameIssuerExpires
rubyist.run C=US, O=Let's Encrypt, CN=YR1 Mon, 07 Sep 2026 23:17:24 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for rubyist.run. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for rubyist.run <a href="https://domaindrift.io/t/rubyist.run"> <img src="https://domaindrift.io/badge/rubyist.run.svg" width="300" height="64" alt="DomainDrift signed observations for rubyist.run"> </a>

Ed25519 Receipt

Receipt ID
rcpt_2a84dc9c32510068
Output Hash
3eaedff5e4bc3a93b6a575029a8766621ecaf4ddc50fde90cb49dd00f832cf24
Signature
ed25519:edaa5b6592aad721a57536e907dd0c5d5cbd629735fce02c5584b122000caf81fd0e48237cdeb4f747d71153efecbca97f5280c675f0cfe5681c1a4d6c059c0c
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser