malware.lu

Observed Aug 10, 2026, 11:22 UTC (4d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of malware.lu was taken 4d ago

malware.lu is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting malware.lu under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch malware.lu Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Up right now
Email byMicrosoft 365
Secured byLet's Encrypt
domcop
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat malware.lu actually stands on - every host below is a signed observation
malware.lu
A / AAAA
213.167.245.235
unattributedserves the site
NS
ns2.root.lualpha.ns.network.luns1.root.lu
root.lu + network.luanswers its DNS
MX
malware-lu.mail.protection.outlook.commalware-lu.mail.protection.outlook.com
Microsoft 365receives its email
TLS
malware.lu
Let's Encryptissued its certificate

DNS Records

A 1

  • 213.167.245.235

MX 2

  • 100malware-lu.mail.protection.outlook.com
  • 0malware-lu.mail.protection.outlook.com

TXT 2

  • v=spf1 include:spf.protection.outlook.com -all
  • MS=ms64462126

NS 3

  • ns2.root.lu
  • alpha.ns.network.lu
  • ns1.root.lu

SOA 1

  • ns1.root.lu admin.root.lu

TLS Certificates (2)

Common NameIssuerExpires
malware.lu C=US, O=Let's Encrypt, CN=R13 Sun, 23 Aug 2026 22:58:11 +0000
R13 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Fri, 12 Mar 2027 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_a815018db441ec15
Output Hash
7c7ea6512a4563031d6d6921556ca0d670f0f08da2ef3741f3870dcb449d5a46
Signature
ed25519:49dcc9625357be7705d31818b07558c09c866c36e532b929d56588424184fcd6d44f1b88d865e096ddd28981a54258d2df2d9f89b61337e307dfbf42f50a5009
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser
CONTINUOUS INTERNET TELEMETRY24H DRIFT46,461 material changesacross 44,568 domains · 24h to ~2h ago · +2,379 vs yesterdayROTATION64 domains moved DNS from koaladns.com to magpiedns.com, 60 moved backa rotation loop, not a migration · 24hNOW491 curated domains not reachablelast probe, steadySITE ERRORS36,513 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 116,152 sites429 rate-limit / 403 bot-block, a posture signal