CONTINUOUS INTERNET TELEMETRY24H DRIFT7,012 material changesacross 6,704 domains · +6,103 vs yesterdayDNS DRIFT440 domains changed DNS providertop destination parity.domains · +414 vs yesterdayEMAIL DRIFT92 domains switched email providertop destination google.com · +84 vs yesterdayCERT DRIFT161 domains switched issuing CA24h · +138 vs yesterdayNOW1,780 curated domains not answering-930 vs yesterdayERRORS20,905 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED92,874 throttled or blocked our scanner429 rate-limit / 403 bot-block

mfa.org

Observed Jul 22, 2026, 00:51 UTC (13h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byMimecast
Secured byGoogle Trust Services
Also usesZoomAtlassianGoogle Search Console
IPv6 · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat mfa.org actually stands on - every host below is a signed observation
mfa.org
A / AAAA
104.18.8.122104.18.9.1222606:4700::6812:87a2606:4700::6812:97a
Cloudflareserves the site
NS
carmelo.ns.cloudflare.comlady.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
us-smtp-inbound-1.mimecast.comus-smtp-inbound-2.mimecast.com
Mimecastreceives its email
TLS
mfa.org
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 104.18.8.122
  • 104.18.9.122

AAAA 2

  • 2606:4700::6812:87a
  • 2606:4700::6812:97a

MX 2

  • 10us-smtp-inbound-1.mimecast.com
  • 10us-smtp-inbound-2.mimecast.com

TXT 20

  • 0ed1fe018a38a024dcdda84f1ca2cc70d764c50b81
  • 4cip80c86d4f7itcvq5kqcf9v8
  • 4mv92lsvjsigpu6ja7ec9muat2
  • 8ir602laprhgnif5c0qdl18vij
  • MS=3BA2C7EB58180FB2BF1FE81F2397A1029F9D1DB1
  • MS=ms75970572
  • ZOOM_verify_psuZAXX5bqoYULfM4dCZPl
  • anthropic-domain-verification-asyfk1=16dIbNulia4DDxCnEPJZU4Gda
  • apple-domain-verification=2tPHulGPnmJ2csqk
  • atlassian-domain-verification=eZnMaXJVsecziDsoHuYiiea1eScNxrKs02dnybAS69lK7LHyApVHr50a2R8apnSH

NS 2

  • carmelo.ns.cloudflare.com
  • lady.ns.cloudflare.com

SOA 1

  • carmelo.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common NameIssuerExpires
mfa.org C=US, O=Google Trust Services, CN=WE1 Mon, 31 Aug 2026 08:52:04 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mfa.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for mfa.org <a href="https://domaindrift.io/t/mfa.org"> <img src="https://domaindrift.io/badge/mfa.org.svg" width="300" height="64" alt="DomainDrift signed observations for mfa.org"> </a>

Ed25519 Receipt

Receipt ID
rcpt_1e78af0d08088bb8
Output Hash
fe872c31dc98c3ca2cda489370c6456c2150666109883abdcec5ec93107bc8cf
Signature
ed25519:fac4a9dd9d7c06affdfd601ed62bd1cd635c3e19c1da3ebfe63151574d597743696fbce425e4e16a9d5f3bff991036b06834154dcc25dfc9b15087fb1f645402
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser