CONTINUOUS INTERNET TELEMETRY24H DRIFT3,548 material changesacross 3,074 domains · +150 vs yesterdayDNS DRIFT27 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT6 domains switched email providertop destination sendgw.comCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW9,710 curated domains not answeringlast probe, steady24H DRIFT3,548 material changesacross 3,074 domains · +150 vs yesterdayDNS DRIFT27 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT6 domains switched email providertop destination sendgw.comCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW9,710 curated domains not answeringlast probe, steady

foxtrot.com.ua

Observed 2026-07-12T04:35:45.294Z (21h ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall
Runs onCloudflare
Also usesGoogle Search Console
IPv6 · 14 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat foxtrot.com.ua actually stands on - every host below is a signed observation
foxtrot.com.ua
A / AAAA
104.20.21.169172.66.158.1132606:4700:10::6814:15a92606:4700:10::ac42:9e71
Cloudflareserves the site
NS
konnor.ns.cloudflare.compaityn.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
mx2.entri.com.uamx1.entri.com.ua
com.uareceives its email

HTTPS probe

bot_blocked Blocked our probe (WAF / bot protection) 403 blocked by cloudflare - bot protection active
HTTP status403
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time1643 ms
DNS resolutionNOERROR
MCP This domain advertises an AI service endpoint at _mcp._tcp.
globalsign-domain-verification=8308b84667b76be79c39cd83c7974aef _globalsign-domain-verification=df12bd693fd7b748a21022ea423d7532

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 104.20.21.169
  • 172.66.158.113

AAAA 2

  • 2606:4700:10::6814:15a9
  • 2606:4700:10::ac42:9e71

MX 2

  • 7mx2.entri.com.ua
  • 7mx1.entri.com.ua

TXT 14

  • google-site-verification=cRfWRemdnqn-3XqKyb1P0bV9GA5Be2ySHKIJHScvvyE
  • globalsign-domain-verification=8308b84667b76be79c39cd83c7974aef
  • v=spf1 mx ip4:195.135.196.0/22 include:spf.protection.outlook.com ~all
  • _globalsign-domain-verification=s6lnR4K_R4n4jo4559iSRJiMVcgfOkQQlCBD8aXYe5
  • ix7b5fjQ6GcTeHYgLFXQRSr7GNIoUJWIroraKT2USbS7Py+5NuxK7lrWblQXs8a5kIHrEWAC16rIKNYT9UyliQ==
  • _globalsign-domain-verification=df12bd693fd7b748a21022ea423d7532
  • google-site-verification=t50HDhS9wAvEoPj5rfARjC7W1TucPNAIls90sLPCghI
  • MS=ms64748388
  • mailru-verification: 2c98f38235b84238
  • amazonses:mCO9jKkX5FqSFcAYbF4aXh+NwSME37fKxTASzMbXB8Q=

NS 2

  • konnor.ns.cloudflare.com
  • paityn.ns.cloudflare.com

SOA 1

  • konnor.ns.cloudflare.com dns.cloudflare.com

CAA 20

  • issue pki.goog; cansignhttpexchanges=yes
  • issue comodoca.com
  • issuewild ssl.com
  • issuewild letsencrypt.org
  • issuewild pki.goog; cansignhttpexchanges=yes
  • issue globalsign.com
  • issue amazontrust.com
  • issue digicert.com; cansignhttpexchanges=yes
  • issuewild comodoca.com
  • issue letsencrypt.org

TLS Certificates (0)

None.

Subdomains (14)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for foxtrot.com.ua. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for foxtrot.com.ua <a href="https://domaindrift.io/t/foxtrot.com.ua"> <img src="https://domaindrift.io/badge/foxtrot.com.ua.svg" width="300" height="64" alt="DomainDrift signed observations for foxtrot.com.ua"> </a>

Ed25519 Receipt

Receipt ID
a58f4981-a0b2-4862-bcea-954129c6c027
Output Hash
173bdd08ba512722623a5b317c54bc52524008562a61c2b2719e9ecead40dc75
Signature
ed25519:15e28993631ff8820ce4dbce5cb3852f6b981f537655e15543f9a5839dd66c747bd65d0343627cfd22eccb2a8e4ea74b82f831e0f04e009ed862ea41d09ef20f
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser