CONTINUOUS INTERNET TELEMETRY24H DRIFT140 material changesacross 94 domains · -518 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bg · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW4,329 curated domains not answering+1,500 vs yesterdayERRORS28,095 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED84,496 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT140 material changesacross 94 domains · -518 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bg · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW4,329 curated domains not answering+1,500 vs yesterdayERRORS28,095 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED84,496 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

rfreed.com

Observed Jul 18, 2026, 12:03 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onOracle Corporation
Secured byLet's Encrypt
Registered withBluehost Inc.
8 subdomains · fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rfreed.com actually stands on - every host below is a signed observation
rfreed.com
A / AAAA
67.20.76.247
Oracle Corporationserves the site
NS
ns2.hostmonster.comns1.hostmonster.com
hostmonster.comanswers its DNS
MX
mail.rfreed.com
rfreed.comreceives its email
TLS
mail.rfreed.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 67.20.76.247

MX 1

  • 0mail.rfreed.com

TXT 1

  • v=spf1 a mx ptr include:hostmonster.com ?all

NS 2

  • ns2.hostmonster.com
  • ns1.hostmonster.com

SOA 1

  • ns1.hostmonster.com root.host2047.hostmonster.com

SRV 1

  • autodiscover.hostmonster.com:443 p0

TLS Certificates (2)

Common NameIssuerExpires
mail.rfreed.com C=US, O=Let's Encrypt, CN=R12 Tue, 18 Aug 2026 11:16:32 +0000
R12 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Fri, 12 Mar 2027 23:59:59 +0000

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for rfreed.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for rfreed.com <a href="https://domaindrift.io/t/rfreed.com"> <img src="https://domaindrift.io/badge/rfreed.com.svg" width="300" height="64" alt="DomainDrift signed observations for rfreed.com"> </a>

Ed25519 Receipt

Receipt ID
31ef30f8-9dc4-4919-bea8-ee2e555b2d62
Output Hash
d6d99abef8ba6dbc4d8bcfacdb7c11b6cb65982b91ceb5e85c7c52c69d820ddc
Signature
ed25519:03650ab2c798b21ee7dbd57d06c218e2edfa201d487af23b2529253ff28b3b9d74d614ca78b60b405036333585517fc61a962489f6b2f4aefdd9b645610ceb0e
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser