CONTINUOUS INTERNET TELEMETRY24H DRIFT2,688 material changesacross 2,488 domains · +1,266 vs yesterdayDNS DRIFT11 domains changed DNS providertop destination cloudflare.com · -10 vs yesterdayEMAIL DRIFT9 domains switched email providertop destination google.com · +4 vs yesterdayCERT DRIFT36 domains switched issuing CA24h · +36 vs yesterdayNOW386 curated domains not answering-324 vs yesterdayERRORS2,386 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,349 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,688 material changesacross 2,488 domains · +1,266 vs yesterdayDNS DRIFT11 domains changed DNS providertop destination cloudflare.com · -10 vs yesterdayEMAIL DRIFT9 domains switched email providertop destination google.com · +4 vs yesterdayCERT DRIFT36 domains switched issuing CA24h · +36 vs yesterdayNOW386 curated domains not answering-324 vs yesterdayERRORS2,386 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,349 throttled or blocked our scanner429 rate-limit / 403 bot-block

sber.ru

Observed 2026-07-18T12:49:05.260449459+00:00 (53m ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onSberbank of Russia PJSC
Secured byLet's Encrypt
Also usesZoomGoogle Search Console
1 subdomain · tranco_10k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat sber.ru actually stands on - every host below is a signed observation
sber.ru
A / AAAA
84.252.149.198
Sberbank of Russia PJSCserves the site
NS
ns1.sberbank.runs2.gldn.netns3.gldn.netns4.sberbank.ru+3 more
sberbank.ru + gldn.netanswers its DNS
MX
email13.sberbank.ruemail14.sberbank.ruemail15.sberbank.ruemail16.sberbank.ru
sberbank.rureceives its email
TLS
sber.ru
Let's Encryptissued its certificate

DNS Records

A 1

  • 84.252.149.198

MX 4

  • 50email13.sberbank.ru
  • 50email14.sberbank.ru
  • 50email15.sberbank.ru
  • 50email16.sberbank.ru

TXT 13

  • C05299057C05331476C05534971C05621828C07448118
  • HWzIGUkDeiuS1SuHBcFQQJqMAcZRyQ+IK44gM99KGqI=
  • MS=ms14147713
  • OSSRH-78703
  • ZOOM_verify_Xpl9caPNT8yrvdFbmC80nQ
  • _globalsign-domain-verification=CjS1rjk5fPhplJ56Y9+FrEfeKJMvNcuilEZMR2IcjfQ=
  • _globalsign-domain-verification=XGtnT6-x2Vuv50ew67IfOw2oTH6JKA1iQrkpOCk_bX
  • fmuJ4Qo5CEy310nAQ9LnhhQ07yFkDD2tbjvmhcKLQes=
  • globalsign-domain-verification=bLfdt5i3Sj25FlXzs7Ph3N80oC5I7Ty78NYL89zM-M
  • google-site-verification=_7KMEF0qJyBCPsUbojc2bcGUMc0lZJr1B0gFtniTZiI

NS 7

  • ns1.sberbank.ru
  • ns2.gldn.net
  • ns3.gldn.net
  • ns4.sberbank.ru
  • nsq.sberbank.ru
  • tmp1.sberbank.ru
  • tmp2.sberbank.ru

SOA 1

  • ns1.sberbank.ru dns.nic.ru

SRV 4

  • vcs-inet-edge-a-01up.sber.ru:5060 p1
  • vcs-inet-edge-a-04sk.sber.ru:5060 p1
  • vcs-inet-edge-b-01up.sber.ru:5060 p1
  • vcs-inet-edge-b-04sk.sber.ru:5060 p1

TLS Certificates (3)

Common NameIssuerExpires
sber.ru C=US, O=Let's Encrypt, CN=YR1 Thu, 17 Sep 2026 05:55:52 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for sber.ru. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for sber.ru <a href="https://domaindrift.io/t/sber.ru"> <img src="https://domaindrift.io/badge/sber.ru.svg" width="300" height="64" alt="DomainDrift signed observations for sber.ru"> </a>

Ed25519 Receipt

Receipt ID
acb3579a-6ceb-4b16-826a-d4ddf0fbd172
Output Hash
26e1c7d6929fdb29514c12731638faafccbf719b7aa57aad28f5dd417c07ceef
Signature
ed25519:f00f60fd92668e3ccdc259fa644483253032bb23c297651397fcf239e484dfbad409e474b762512ec03f6049cfa2f59dd06a1c58cc5d2530c74f30c22404110a
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser