CONTINUOUS INTERNET TELEMETRY24H DRIFT4,470 material changesacross 4,025 domains · last 24h · -5,945 vs yesterdayDNS DRIFT250 domains changed DNS providertop destination cloudflare.com · -409 vs yesterdayEMAIL DRIFT55 domains switched email providertop destination google.com · -112 vs yesterdayCERT DRIFT77 domains switched issuing CA24h · -142 vs yesterdayNOW486 curated domains not reachable-217 vs yesterdaySITE ERRORS17,249 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,587 sites429 rate-limit / 403 bot-block, a posture signal

anduin.net

Observed Jul 24, 2026, 06:03 UTC (9h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain
Up right now
Secured byLet's Encrypt
Also usesGoogle Search Console
tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat anduin.net actually stands on - every host below is a signed observation
anduin.net
A / AAAA
185.42.170.200
unattributedserves the site
NS
services.hh.modirum.comservices.aws-sth.modirum.comns.hyp.netns1.anduin.net
modirum.com + hyp.net + moreanswers its DNS
MX
services02.hh.modirum.commail.modirum.commail.anduin.netservices01.hh.modirum.com+1 more
modirum.com + anduin.netreceives its email
TLS
*.anduin.net
Let's Encryptissued its certificate

DNS Records

A 1

  • 185.42.170.200

MX 5

  • 100services02.hh.modirum.com
  • 10mail.modirum.com
  • 10mail.anduin.net
  • 100services01.hh.modirum.com
  • 20services.hh.modirum.com

TXT 4

  • v=spf1 include:_spf.anduin.net ip4:185.42.170.200/32 ~all
  • google-site-verification=E244Pw2O2nz7V2t3viB4ItCeSBwecItRCABA55AY9v4
  • _globalsign-domain-verification=4KKQPnl9DlHiTTpT_JYcThKaFp_0xu9n-ltt7IAT1J
  • v=DMARC1;p=reject;fo=1;rua=mailto:postmaster-dmarc@anduin.net;ruf=mailto:postmaster-dmarc@anduin.net

NS 4

  • services.hh.modirum.com
  • services.aws-sth.modirum.com
  • ns.hyp.net
  • ns1.anduin.net

SOA 1

  • ns1.anduin.net ltning.anduin.net

SRV 2

  • mail.anduin.net:993 p0
  • mail.anduin.net:2525 p0

CAA 7

  • issue "globalsign.com"
  • issue "buypass.no"
  • issue "buypass.com"
  • iodef "mailto:hostmaster@anduin.net"
  • issue "letsencrypt.org"
  • issue "sectigo.com"
  • issue "digicert.com"

TLS Certificates (3)

Common NameIssuerExpires
*.anduin.net C=US, O=Let's Encrypt, CN=YR2 Thu, 01 Oct 2026 23:26:30 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for anduin.net. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for anduin.net <a href="https://domaindrift.io/t/anduin.net"> <img src="https://domaindrift.io/badge/anduin.net.svg" width="300" height="64" alt="DomainDrift signed observations for anduin.net"> </a>

Ed25519 Receipt

Receipt ID
rcpt_8af78155fac4d5ab
Output Hash
57b63afb4cd073c7e60d9c3259b232803950afe61a115dd7eb1d25a0060b0011
Signature
ed25519:936013153e86eeffd3213fb0ece07b6fb0f28abc01677052aa1e87fa7baa2e5de7abad6a15705995522b3901123ed216c697dd4ec7941ebab4dc5f4316980507
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser