CONTINUOUS INTERNET TELEMETRY24H DRIFT1,659 material changesacross 1,457 domains · +237 vs yesterdayDNS DRIFT10 domains changed DNS providertop destination parity.domains · -11 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination pphosted.com · -1 vs yesterdayNOW799 curated domains not answering+89 vs yesterdayERRORS3,643 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,889 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,659 material changesacross 1,457 domains · +237 vs yesterdayDNS DRIFT10 domains changed DNS providertop destination parity.domains · -11 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination pphosted.com · -1 vs yesterdayNOW799 curated domains not answering+89 vs yesterdayERRORS3,643 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,889 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

aip.ooo

Observed 2026-07-17T14:17:50.711499161+00:00 (15h ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Signed observation on record.
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat aip.ooo actually stands on - every host below is a signed observation
aip.ooo
NS
ns3-l2.nic.runs4-l2.nic.runs8-l2.nic.runs4-cloud.nic.ru+1 more
nic.ruanswers its DNS
MX
mx2.cyberprotect.rumx1.cyberprotect.rumx1.aip.ooomx2.aip.ooo
cyberprotect.ru + aip.oooreceives its email

DNS Records

MX 4

  • 5mx2.cyberprotect.ru
  • 10mx1.cyberprotect.ru
  • 30mx1.aip.ooo
  • 30mx2.aip.ooo

TXT 3

  • v=spf1 a:mx1.cyberprotect.ru a:mx2.cyberprotect.ru ~all
  • _globalsign-domain-verification=wqWHwoqgLbl1crK3Stml6X_ccy28Od0ShzwDV1-Ik0
  • v=DMARC1; p=none

NS 5

  • ns3-l2.nic.ru
  • ns4-l2.nic.ru
  • ns8-l2.nic.ru
  • ns4-cloud.nic.ru
  • ns8-cloud.nic.ru

SOA 1

  • ns3-l2.nic.ru dns.nic.ru

SRV 1

  • autodiscover.aip.ooo:443 p1

CAA 7

  • iodef "mailto:admins@cyberprotect.ru"
  • issue "globalsign.com"
  • issue "letsencrypt.org"
  • issue "rapidssl.com"
  • issuewild "globalsign.com"
  • issuewild "letsencrypt.org"
  • issuewild "rapidssl.com"

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for aip.ooo. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for aip.ooo <a href="https://domaindrift.io/t/aip.ooo"> <img src="https://domaindrift.io/badge/aip.ooo.svg" width="300" height="64" alt="DomainDrift signed observations for aip.ooo"> </a>

Ed25519 Receipt

Receipt ID
f98a4168-ff26-455a-98de-c165c36bae8c
Output Hash
508c284e66b4b778857c641f1efcac2eda79aa6c11ff92682c2635622c2358b7
Signature
ed25519:48f694ab4264a131a698d48a1e695ec8bf262728d07915e598758d5301ee52ece7797c0c62cf6020bb3163e92baba111e86473f4c3631ef44a61d3d81ca53904
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser