CONTINUOUS INTERNET TELEMETRY24H DRIFT4,915 material changesacross 4,759 domains · last 24h · -3,919 vs yesterdayDNS DRIFT144 domains changed DNS providertop destination cloudflare.com · -133 vs yesterdayEMAIL DRIFT33 domains switched email providertop destination outlook.com · -21 vs yesterdayCERT DRIFT48 domains switched issuing CA24h · -25 vs yesterdayNOW487 curated domains not reachable-70 vs yesterdaySITE ERRORS34,104 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 144,759 sites429 rate-limit / 403 bot-block, a posture signal

rfhl.com

Observed Jul 28, 2026, 00:24 UTC (15h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Secured byStarfield Technologies
Also usesGoogle Search Console
1 subdomain · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rfhl.com actually stands on - every host below is a signed observation
rfhl.com
A / AAAA
192.124.249.182
unattributedserves the site
NS
pdns11.domaincontrol.compdns12.domaincontrol.com
domaincontrol.comanswers its DNS
MX
cluster5.us.messagelabs.comcluster5a.us.messagelabs.com
messagelabs.comreceives its email
TLS
rfhl.com
Starfield Technologiesissued its certificate

DNS Records

A 1

  • 192.124.249.182

MX 2

  • 10cluster5.us.messagelabs.com
  • 20cluster5a.us.messagelabs.com

TXT 7

  • MS=ms63916946
  • c4fagvg5fceh3mee5hl54i0u4s
  • ss3tm2jntju6ukgesprcq2a167
  • vp=spf1 include:spf.emailsignatures365.com -all
  • google-site-verification=vK5m6DFvsDMg2yY2emWzwULhCbJnzxK88y3wtTo0cxY
  • v=spf1 mx ip4:35.182.111.116 ip4:52.60.204.165 ip4:52.60.222.30 ip4:52.60.245.122 ip4:209.94.193.34 ip4:181.188.28.50 ip4:190.58.151.38 ip4:190.58.151.40 ip4:190.213.4.50 ip4:190.213.4.57 ip4:216.110.114.161 ip4:139.131.76.81 include:spf.protection.outlook.com include:spf.messagelabs.com include:spfrerouting.xink.io include:mktomail.com ~all
  • v=DMARC1; p=quarantine; rua=mailto:itufvxqz@ag.dmarcian.com; ruf=mailto:rblitsecops@rfhl.com; sp=quarantine; aspf=s; fo=s;

NS 2

  • pdns11.domaincontrol.com
  • pdns12.domaincontrol.com

SOA 1

  • pdns11.domaincontrol.com dns.jomax.net

TLS Certificates (3)

Common NameIssuerExpires
rfhl.com C=US, O=Starfield Technologies, CN=Starfield TLS Intermediate CA DV - R1v1 Thu, 22 Oct 2026 23:59:31 +0000
Starfield TLS Intermediate CA DV - R1v1 C=US, O=Starfield Technologies, CN=Starfield TLS Root CA - R1 Thu, 23 Aug 2040 11:59:59 +0000
Starfield TLS Root CA - R1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2 Thu, 31 Dec 2037 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for rfhl.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for rfhl.com <a href="https://domaindrift.io/t/rfhl.com"> <img src="https://domaindrift.io/badge/rfhl.com.svg" width="300" height="64" alt="DomainDrift signed observations for rfhl.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_37643c7a32033842
Output Hash
d0d3b5a203335d89d31f4bdea13fc5cafab4f2b396d4ee50a79d0c2cca1e374b
Signature
ed25519:90dd30664eda2417ac532d36576032bfe66ce14c96449643f21023b6b5baabc7de75188ab515e1f2fcb9eeba5d6d1a14e7b9b20eb9013724363c7c156d0ad30f
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser