CONTINUOUS INTERNET TELEMETRY24H DRIFT2,156 material changesacross 1,949 domains · -395 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination cloudflare.com · -1 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,391 curated domains not answeringlast probe, steadyERRORS10,886 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,156 material changesacross 1,949 domains · -395 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination cloudflare.com · -1 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,391 curated domains not answeringlast probe, steadyERRORS10,886 responded with an errorlast probe · 5xx / 404 / 429 / 403

cmd.su

Observed 2026-07-13T22:49:55.431Z (8h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Also usesGoogle Search Console
7 subdomains · tranco_10k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat cmd.su actually stands on - every host below is a signed observation
cmd.su
A / AAAA
82.204.182.226
Cloudflareserves the site
NS
dns05.cmd.sudns02.cmd.sudns03.cmd.sudns04.cmd.su+1 more
cmd.suanswers its DNS
MX
mx01.cmd.sumx03.cmd.sumx06.cmd.sumx04.cmd.su+4 more
cmd.sureceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.cmd-online.ru/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time604 ms
DNS resolutionNOERROR
Redirect chain
https://www.cmd-online.ru/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 82.204.182.226

MX 8

  • 0mx01.cmd.su
  • 20mx03.cmd.su
  • 30mx06.cmd.su
  • 30mx04.cmd.su
  • 40mailgateway01.cmd.su
  • 40mailgateway02.cmd.su
  • 30mx05.cmd.su
  • 10mx02.cmd.su

TXT 7

  • _globalsign-domain-verification=EnZw9eEuv_OfbVk4AkYHGH95tjFT8yK7eb0t5t1KX_
  • google-site-verification=FYGU1YsyIAc2hIdgZkr3Fr2gmDZOnhCOP2XKd38US94
  • google-site-verification=o7_cjF5YsqNgrBCM7esJJxspHZ01H_ksxVryk6ByFl8
  • globalsign-domain-verification=FTSHwNgGu5GKvlxsnSveZJ6NILJuVa9xaP3GV7USER
  • v=spf1 mx ip4:212.45.9.165 ip4:87.245.177.10 ip4:213.171.51.234 ip4:82.204.182.237 ip4:82.204.182.227 include:_spf.dashasender.ru -all
  • 24b37241-7d80-482e-a5a8-7240366e860e
  • v=DMARC1;p=reject;rua=mailto:dmarc-aggregation@cmd.su;pct=99;ruf=mailto:dmarc-failed@cmd.su;fo=1;aspf=s;adkim=s;

NS 5

  • dns05.cmd.su
  • dns02.cmd.su
  • dns03.cmd.su
  • dns04.cmd.su
  • dns01.cmd.su

SOA 1

  • dns01.cmd.su vbykovskiy.cmd.su

TLS Certificates (0)

None.

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cmd.su. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for cmd.su <a href="https://domaindrift.io/t/cmd.su"> <img src="https://domaindrift.io/badge/cmd.su.svg" width="300" height="64" alt="DomainDrift signed observations for cmd.su"> </a>

Ed25519 Receipt

Receipt ID
2c06774e-5f13-4b0d-aec1-43dd2caa5a4b
Output Hash
698f84b79fc134b1098581fa420ba0c16a0634362df417b1fe687c6c70c399fa
Signature
ed25519:0cdc108dcb6aa17a659aaeaa1f97504ecc71084779a950216cd06b38119a4c502a92c385b5c05b53a73583c3877c84d93a8f465e2995d9a3bf1802cc2616bd0a
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser