CONTINUOUS INTERNET TELEMETRY24H DRIFT10,318 material changesacross 9,893 domains · -311 vs yesterdayDNS DRIFT669 domains changed DNS providertop destination parity.domains · -111 vs yesterdayEMAIL DRIFT193 domains switched email providertop destination outlook.com · +23 vs yesterdayCERT DRIFT238 domains switched issuing CA24h · +8 vs yesterdayNOW689 curated domains not reachable-660 vs yesterdaySITE ERRORS17,940 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED96,108 throttled or blocked our scanner429 rate-limit / 403 bot-block

cmd.su

Observed Jul 23, 2026, 11:54 UTC (4h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain
Up right now
Runs onCloudflare
Also usesGoogle Search Console
7 subdomains · tranco_10k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat cmd.su actually stands on - every host below is a signed observation
cmd.su
A / AAAA
82.204.182.226
Cloudflareserves the site
NS
dns05.cmd.sudns02.cmd.sudns03.cmd.sudns01.cmd.su+1 more
cmd.suanswers its DNS
MX
mailgateway01.cmd.sumailgateway02.cmd.sumx05.cmd.sumx06.cmd.su+4 more
cmd.sureceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.cmd-online.ru/
HTTP status301
Servercloudflare
TLS protocolnot observed
TLS issuernot observed
Behind Cloudflareyes
Response time1113 ms
DNS resolutionNOERROR
Redirect chain
https://www.cmd-online.ru/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 82.204.182.226

MX 8

  • 40mailgateway01.cmd.su
  • 40mailgateway02.cmd.su
  • 30mx05.cmd.su
  • 30mx06.cmd.su
  • 30mx04.cmd.su
  • 0mx01.cmd.su
  • 10mx02.cmd.su
  • 20mx03.cmd.su

TXT 6

  • _globalsign-domain-verification=EnZw9eEuv_OfbVk4AkYHGH95tjFT8yK7eb0t5t1KX_
  • 24b37241-7d80-482e-a5a8-7240366e860e
  • v=spf1 mx ip4:212.45.9.165 ip4:87.245.177.10 ip4:213.171.51.234 ip4:82.204.182.237 ip4:82.204.182.227 include:_spf.dashasender.ru -all
  • google-site-verification=o7_cjF5YsqNgrBCM7esJJxspHZ01H_ksxVryk6ByFl8
  • google-site-verification=FYGU1YsyIAc2hIdgZkr3Fr2gmDZOnhCOP2XKd38US94
  • globalsign-domain-verification=FTSHwNgGu5GKvlxsnSveZJ6NILJuVa9xaP3GV7USER

NS 5

  • dns05.cmd.su
  • dns02.cmd.su
  • dns03.cmd.su
  • dns01.cmd.su
  • dns04.cmd.su

SOA 1

  • dns01.cmd.su vbykovskiy.cmd.su

TLS Certificates (0)

None.

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cmd.su. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for cmd.su <a href="https://domaindrift.io/t/cmd.su"> <img src="https://domaindrift.io/badge/cmd.su.svg" width="300" height="64" alt="DomainDrift signed observations for cmd.su"> </a>

Ed25519 Receipt

Receipt ID
rcpt_a29340385b753fb1
Output Hash
3bd63857fe226b6c6ceae0b5c13d7856adf6360fc7ee6d903ff18eac7983bd74
Signature
ed25519:f28a4a42cc786881b6d393b1db0ed7a8fd2fd5ebf2c53692131e88158adb0f9ca61ec51d8fc2b664484949fa288e7d137dac51a95f70f3123d5612e10ec7bd03
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser