rootkit.com
Observed Jul 27, 2026, 03:58 UTC (6d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.
Not responding
Signed observation on record.
majestic
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rootkit.com actually stands on - every host below is a signed observation
rootkit.com
A / AAAA
50.47.64.51
unattributedserves the site
NS
ns1.cw-networks.netns0.cw-networks.net
cw-networks.netanswers its DNS
MX
mail.rootkit.com
rootkit.comreceives its email
DNS Records
A 1
50.47.64.51
MX 1
10mail.rootkit.com
TXT 3
v=spf1 mx a -all?v=DMARC1; p=quarantine; fo=0; adkim=r; aspf=r; pct=100; rf=afrf; ri=86400; sp=none; rua=mailto:dmarc@rootkit.com
NS 2
ns1.cw-networks.netns0.cw-networks.net
SOA 1
ns0.cw-networks.net hostmaster.cw-networks.net
SRV 3
mail.rootkit.com:443 p0mail.rootkit.com:993 p0mail.rootkit.com:587 p0
TLS Certificates (0)
None.
Subdomains (0)
None observed.
The proof
Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.
Verify this receiptPut the receipt on your own site. A live badge showing what DomainDrift observes and signs for rootkit.com. It updates itself. It attests a signed observation - not that the site is safe.
<a href="https://domaindrift.io/t/rootkit.com">
<img src="https://domaindrift.io/badge/rootkit.com.svg"
width="300" height="64" alt="DomainDrift signed observations for rootkit.com">
</a>
Ed25519 Receipt
- Receipt ID
rcpt_94d6cb1f635b6fa8- Output Hash
e36feee7a920ca2185e328548eef71a25f50c9ae23943e67e05f4d3586cb0b57- Signature
ed25519:c9897800d2ef66b1d04a6a7206099bb4c00ee943c30075e36fbd58340b0bb41189905230f89e02677fc5d98a22b8a62e80aa4445a33dbb2d53e093d4c80ad603- Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9- Parent
(genesis)- Plane
- fast