CONTINUOUS INTERNET TELEMETRY24H DRIFT3,091 material changesacross 2,810 domains · -307 vs yesterdayDNS DRIFT18 domains changed DNS providertop destination cloudflare.com · -9 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT6 domains switched issuing CA24h · -1 vs yesterdayNOW3,325 curated domains not answering-6,393 vs yesterdayERRORS10,911 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,091 material changesacross 2,810 domains · -307 vs yesterdayDNS DRIFT18 domains changed DNS providertop destination cloudflare.com · -9 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT6 domains switched issuing CA24h · -1 vs yesterdayNOW3,325 curated domains not answering-6,393 vs yesterdayERRORS10,911 responded with an errorlast probe · 5xx / 404 / 429 / 403

croc.ru

Observed 2026-07-13T02:12:27.653Z (18h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Also usesGoogle Search Console
14 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat croc.ru actually stands on - every host below is a signed observation
croc.ru
A / AAAA
178.248.234.15
Cloudflareserves the site
NS
ns3.croc.runs2.croc.runs1.croc.ru
croc.ruanswers its DNS
MX
marketmail.croc.ruksmg4.croc.ruksmg.croc.ruksmg2.croc.ru+1 more
croc.rureceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.croc.ru/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time872 ms
DNS resolutionNOERROR
Redirect chain
https://www.croc.ru/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 178.248.234.15

MX 5

  • 1000marketmail.croc.ru
  • 1ksmg4.croc.ru
  • 1ksmg.croc.ru
  • 1ksmg2.croc.ru
  • 1ksmg3.croc.ru

TXT 10

  • v=spf1 a mx ip4:195.38.23.116 ip4:195.38.23.108 ip4:195.38.23.107 ip4:195.38.23.35 ip4:195.38.23.66 a:otm.croc.ru -all
  • yandex-verification: 4ed0321b4eebaa7f
  • MDeWOQx5ytM+gA6IxrqgnUcveqD8eqV/IlWG03Bgk/YGkg/Snt63F1g5Esk1Pv37uqXGjYiMt2d45mmojRHxRQ==
  • google-site-verification=PxTqv6en25qu1ljb8VxRlu24Pt4-G2IUir7T9BFr1f0
  • MS=F8BED084BE83E379FA9D60E6D20AE8354DF3490D
  • cisco-ci-domain-verification=6226fa06bca75238f7b2c25effd8c489029bd1085146916164ba9aa88a29929d
  • FKegKuohrfJnuPTiDiKf5hoTb1ja1nz8A/F1mR/zcD4=
  • MS=ms27964100
  • _globalsign-domain-verification=LwEt0fyKWzy0-PcjHxrYQc3n_TnFKF22CqZmwphdpT
  • v=DMARC1; p=quarantine; rua=mailto:report-DMARC@croc.ru

NS 3

  • ns3.croc.ru
  • ns2.croc.ru
  • ns1.croc.ru

SOA 1

  • ns2.croc.ru admin.croc.ru

TLS Certificates (0)

None.

Subdomains (14)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for croc.ru. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for croc.ru <a href="https://domaindrift.io/t/croc.ru"> <img src="https://domaindrift.io/badge/croc.ru.svg" width="300" height="64" alt="DomainDrift signed observations for croc.ru"> </a>

Ed25519 Receipt

Receipt ID
6f42b9fc-567f-47b1-b46a-c0d9603cc00a
Output Hash
5cb376560e5347fd86231884cea3ff5607a33de292398d01ddf10c02b1991486
Signature
ed25519:722027e60ec69dab1da9517242a26e096583b946c5690160739a6e2fbb56d7ab866ce02c65510e802b7a3c3a42c49a1865b0887ef9600b56e80065c3764ce205
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser