CONTINUOUS INTERNET TELEMETRY24H3,987 material changesacross 3,224 domains · +12 vs yesterdayMOVES44 domains changed DNS providertop destination dns.br · +5 vs yesterdayMOVES13 domains switched email providertop destination mimecast.com · +1 vs yesterdayTLS12 domains switched issuing CA24h · -3 vs yesterdayNOW9,764 curated domains not answeringlast probe, steadyMOVERgov.brDNS provider changed: gov.br → dns.br24H3,987 material changesacross 3,224 domains · +12 vs yesterdayMOVES44 domains changed DNS providertop destination dns.br · +5 vs yesterdayMOVES13 domains switched email providertop destination mimecast.com · +1 vs yesterdayTLS12 domains switched issuing CA24h · -3 vs yesterdayNOW9,764 curated domains not answeringlast probe, steadyMOVERgov.brDNS provider changed: gov.br → dns.br

ruldin.cc

Observed 2026-07-05T04:14:18.866Z (7d ago). Every field below was attested with an Ed25519 signature at scan time.

INFRASTRUCTURE MAPwhat ruldin.cc actually stands on - every host below is a signed observation
ruldin.cc
A / AAAA
103.224.182.249
unattributedserves the site
NS
ns2.abovedomains.comns1.abovedomains.com
abovedomains.comanswers its DNS
MX
park-mx.above.com
above.comreceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time273 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 103.224.182.249

MX 1

  • 10park-mx.above.com

TXT 4

  • v=spf1 ip6:fdcf:abda:4154::/48 -all
  • v=spf1 ip6:fdcf:abda:4154::/48 -all
  • v=DKIM1; (detected)
  • v=spf1 ip6:fdcf:abda:4154::/48 -all

NS 2

  • ns2.abovedomains.com
  • ns1.abovedomains.com

SOA 1

  • ns1.abovedomains.com hostmaster.trellian.com

TLS Certificates (0)

None.

Subdomains (96)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what Connor observes and signs for ruldin.cc. It updates itself. It attests a signed observation - not that the site is safe.

Connor signed-observation badge for ruldin.cc <a href="https://connor.dns.drm3.network/t/ruldin.cc"> <img src="https://connor.dns.drm3.network/badge/ruldin.cc.svg" width="300" height="64" alt="Connor signed observations for ruldin.cc"> </a>

Ed25519 Receipt

Receipt ID
8a9f9d6d-eeba-42b5-8fd5-4ef3c7b717b0
Output Hash
bb4e63de90767bf5de7a0c9afa95a3dbec0a95ce23012ba8737c78b9f1044d55
Signature
ed25519:b0721f99afc7aded41692724940d001ddd59fd91e7b054c1bc858da73ddd562ac40b429fe8209c03a979962de3a1dbe518d8c82896aed1f3d6d081c38231110e
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser