CONTINUOUS INTERNET TELEMETRY24H DRIFT8,943 material changesacross 8,530 domains · last 24h · -1,472 vs yesterdayDNS DRIFT551 domains changed DNS providertop destination cloudflare.com · -108 vs yesterdayEMAIL DRIFT133 domains switched email providertop destination google.com · -34 vs yesterdayCERT DRIFT185 domains switched issuing CA24h · -34 vs yesterdayNOW475 curated domains not reachable-228 vs yesterdaySITE ERRORS17,388 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,855 sites429 rate-limit / 403 bot-block, a posture signal

aip.ooo

Observed Jul 24, 2026, 03:36 UTC (28m ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain
Not responding
Signed observation on record.
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat aip.ooo actually stands on - every host below is a signed observation
aip.ooo
NS
ns3-l2.nic.runs4-l2.nic.runs8-l2.nic.runs4-cloud.nic.ru+1 more
nic.ruanswers its DNS
MX
mx2.cyberprotect.rumx1.cyberprotect.rumx1.aip.ooomx2.aip.ooo
cyberprotect.ru + aip.oooreceives its email

DNS Records

MX 4

  • 5mx2.cyberprotect.ru
  • 10mx1.cyberprotect.ru
  • 30mx1.aip.ooo
  • 30mx2.aip.ooo

TXT 3

  • v=spf1 a:mx1.cyberprotect.ru a:mx2.cyberprotect.ru ~all
  • _globalsign-domain-verification=wqWHwoqgLbl1crK3Stml6X_ccy28Od0ShzwDV1-Ik0
  • v=DMARC1; p=none

NS 5

  • ns3-l2.nic.ru
  • ns4-l2.nic.ru
  • ns8-l2.nic.ru
  • ns4-cloud.nic.ru
  • ns8-cloud.nic.ru

SOA 1

  • ns3-l2.nic.ru dns.nic.ru

SRV 1

  • autodiscover.aip.ooo:443 p1

CAA 7

  • iodef "mailto:admins@cyberprotect.ru"
  • issue "globalsign.com"
  • issue "letsencrypt.org"
  • issue "rapidssl.com"
  • issuewild "globalsign.com"
  • issuewild "letsencrypt.org"
  • issuewild "rapidssl.com"

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for aip.ooo. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for aip.ooo <a href="https://domaindrift.io/t/aip.ooo"> <img src="https://domaindrift.io/badge/aip.ooo.svg" width="300" height="64" alt="DomainDrift signed observations for aip.ooo"> </a>

Ed25519 Receipt

Receipt ID
rcpt_4d49bef6e105fe6d
Output Hash
508c284e66b4b778857c641f1efcac2eda79aa6c11ff92682c2635622c2358b7
Signature
ed25519:6d0705380590c680a2ed9f92ad019d0b41c3c0fbf46eb76233a50c21231f3e43941527ee360f400512a3c729446a9f57a1e52d824df48bdd5eaac27a0c315207
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser