CONTINUOUS INTERNET TELEMETRY24H4,057 material changesacross 3,312 domains · +82 vs yesterdayMOVES43 domains changed DNS providertop destination dns.br · +4 vs yesterdayMOVES12 domains switched email providertop destination mimecast.comTLS10 domains switched issuing CA24h · -5 vs yesterdayNOW9,765 curated domains not answeringlast probe, steadyMOVERgov.brDNS provider changed: gov.br → dns.br24H4,057 material changesacross 3,312 domains · +82 vs yesterdayMOVES43 domains changed DNS providertop destination dns.br · +4 vs yesterdayMOVES12 domains switched email providertop destination mimecast.comTLS10 domains switched issuing CA24h · -5 vs yesterdayNOW9,765 curated domains not answeringlast probe, steadyMOVERgov.brDNS provider changed: gov.br → dns.br

uni-duesseldorf.de

Observed 2026-07-04T06:18:14.568Z (8d ago). Every field below was attested with an Ed25519 signature at scan time.

INFRASTRUCTURE MAPwhat uni-duesseldorf.de actually stands on - every host below is a signed observation
uni-duesseldorf.de
A / AAAA
134.99.128.238
unattributedserves the site
NS
dns-1.dfn.deselene.rz.uni-duesseldorf.dedns-3.dfn.desirene.rz.uni-duesseldorf.de+1 more
dfn.de + uni-duesseldorf.deanswers its DNS
MX
c2881.mx.srv.dfn.dea2881.mx.srv.dfn.deb2881.mx.srv.dfn.de
dfn.dereceives its email

HTTPS probe

redirect Redirecting (3xx) 302 → https://www.hhu.de/
HTTP status302
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time1146 ms
DNS resolutionNOERROR
Redirect chain
https://www.hhu.de/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 134.99.128.238

MX 3

  • 10c2881.mx.srv.dfn.de
  • 10a2881.mx.srv.dfn.de
  • 10b2881.mx.srv.dfn.de

TXT 9

  • Q181-R920-S212
  • HARICA-bCYMh0SDGtswzHtocY7
  • security_policy=https://www.hhu.de/it-sicherheit
  • security_contact=cert@hhu.de
  • adobe-idpfzim.-site-verification=18ec973e322894c7c0c11b75d7434eb7c4a5b8d2f164b30a6d47f928c7b5f811
  • v=spf1 ip4:134.99.18.0/24 ip4:134.99.128.0/24 ip4:134.99.108.0/27 ip4:134.99.108.128/27 include:spf.qb-feedback.com include:_spf.o288.mx.srv.dfn.de -all
  • google-site-verification=DXljWnX7rdU4M0eVZpbohHsXbc8q8VEP4GdNoPwL5yE
  • cisco-ci-domain-verification=4a60e9dddacd024a7029731869b6259bfb32e550f5004eb699afadf7d558cbf
  • v=DMARC1;p=none;sp=quarantine;pct=100;rua=mailto:dmarc-reports@uni-duesseldorf.de;ruf=mailto:dmarc-reports@uni-duesseldorf.de;aspf=r

NS 5

  • dns-1.dfn.de
  • selene.rz.uni-duesseldorf.de
  • dns-3.dfn.de
  • sirene.rz.uni-duesseldorf.de
  • dns-2.dfn.de

SOA 1

  • sirene.rz.uni-duesseldorf.de hostmaster.uni-duesseldorf.de

CAA 6

  • iodef mailto:cert@hhu.de
  • issue telesec.de
  • issue pki.dfn.de
  • issue sectigo.com
  • issue harica.gr
  • issuewild harica.gr

TLS Certificates (0)

None.

Subdomains (115)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what Connor observes and signs for uni-duesseldorf.de. It updates itself. It attests a signed observation - not that the site is safe.

Connor signed-observation badge for uni-duesseldorf.de <a href="https://connor.dns.drm3.network/t/uni-duesseldorf.de"> <img src="https://connor.dns.drm3.network/badge/uni-duesseldorf.de.svg" width="300" height="64" alt="Connor signed observations for uni-duesseldorf.de"> </a>

Ed25519 Receipt

Receipt ID
bd372188-37ef-495b-a009-00c9961b75b2
Output Hash
c2d86e1700cd5e87d31bfd3f086749049a7c6dbdf5fc238baedf765da891a4b3
Signature
ed25519:a53751d981d2341b45a2eecf2544326682e584892095c504fb39a0f8869f2c8ae6efb157b7695ae933516a8ea9b47c259e873f9fd794ab3d43af22f1a70c8d0d
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser