bfu-web.de

Observed Aug 11, 2026, 06:51 UTC (4d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of bfu-web.de was taken 4d ago

bfu-web.de is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting bfu-web.de under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch bfu-web.de Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Verify this receipt yourself + Watch this domain
Up right now
Runs onDeutscher Wetterdienst
Secured bySectigo
Also usesCisco
2 subdomains · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat bfu-web.de actually stands on - every host below is a signed observation
bfu-web.de
A / AAAA
141.38.3.30
Deutscher Wetterdienstserves the site
NS
dnsisp2.dwd.dedns-3.dfn.dednsisp1.dwd.de
dwd.de + dfn.deanswers its DNS
MX
ofcsgbbm.gbbmvi-wan.dezbcsgbbm.gbbmvi-wan.de
gbbmvi-wan.dereceives its email
TLS
bfuweb.mandant.dwd.de
Sectigo Limitedissued its certificate

DNS Records

A 1

  • 141.38.3.30

MX 2

  • 10ofcsgbbm.gbbmvi-wan.de
  • 20zbcsgbbm.gbbmvi-wan.de

TXT 2

  • v=spf1 mx ip4:141.38.3.247 ip4:141.38.3.248 ip4:141.38.12.84 ip4:141.38.12.85 ip4:141.38.3.230 ~all
  • cisco-ci-domain-verification=5968e1db5a1c0ef7ab5ba9babf7336547cb3fe02cb3f89cef31cd51f1c7524a7

NS 3

  • dnsisp2.dwd.de
  • dns-3.dfn.de
  • dnsisp1.dwd.de

SOA 1

  • dnsextgmc.dwd.de netz\.administrator.dwd.de

DMARC_RECORDS 1

  • v=DMARC1; p=none; rua=mailto:reports@report.ofcsgbbm.gbbmdv.bund.de

TLS Certificates (3)

Common NameIssuerExpires
bfuweb.mandant.dwd.de C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36 Sun, 03 Jan 2027 23:59:59 +0000
Sectigo Public Server Authentication CA OV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_597ee0e5f2028817
Output Hash
3115c2701e1e7890b8d3cc60725953b5bee4d4f2d7ae4e3ac9c6c9ec145b2800
Signature
ed25519:862c0f6a9945ac7178945bb50aa673e9fd8a95cde86ff95280ca3e02fd69a95f2762a1589c3409ec721a331672f514370ea39832c792b2395cdc31aa92a6820c
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser
CONTINUOUS INTERNET TELEMETRY24H DRIFT47,001 material changesacross 45,161 domains · 24h to ~45m ago · +3,494 vs yesterdayROTATION58 domains moved DNS from koaladns.com to magpiedns.com, 53 moved backa rotation loop, not a migration · 24hNOW496 curated domains not reachablelast probe, steadySITE ERRORS36,287 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 117,311 sites429 rate-limit / 403 bot-block, a posture signal