CONTINUOUS INTERNET TELEMETRY24H DRIFT1,388 material changesacross 1,163 domains · +934 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination pphosted.com · +5 vs yesterdayNOW333 curated domains not answering-1,882 vs yesterdayERRORS2,351 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,294 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,388 material changesacross 1,163 domains · +934 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination pphosted.com · +5 vs yesterdayNOW333 curated domains not answering-1,882 vs yesterdayERRORS2,351 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,294 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

root.lu

Observed 2026-07-17T14:25:22.666800983+00:00 (5h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onroot
Secured byDigiCert
Also usesGoogle Search Console
IPv6 · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat root.lu actually stands on - every host below is a signed observation
root.lu
A / AAAA
195.26.5.1002a01:608::200
rootserves the site
NS
c.root.lua.root.lub.root.lu
root.luanswers its DNS
MX
in.mx.root.lu
root.lureceives its email
TLS
*.root.lu
DigiCert Incissued its certificate

DNS Records

A 1

  • 195.26.5.100

AAAA 1

  • 2a01:608::200

MX 1

  • 10in.mx.root.lu

TXT 5

  • MS=6B463D7C9120BC49074EE4782972FB613BC53C76
  • knowbe4-site-verification=3eded9e9ea0f63c7a18c1b928f7bee6a
  • google-site-verification=vVAX-EejoddQ-0UvZiFViEvtN_X5ePrngiy67nTv0Ow
  • v=spf1 ip4:195.26.4.0/23 ip4:195.24.72.0/21 ip4:83.243.8.0/21 ip4:212.117.160.0/19 ip4:94.242.192.0/18 ip4:188.42.0.0/16 ip6:2a01:608::/32 -all
  • Ma3-YG7-99k

NS 3

  • c.root.lu
  • a.root.lu
  • b.root.lu

SOA 1

  • a.root.lu admin.root.lu

TLS Certificates (3)

Common NameIssuerExpires
*.root.lu C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=RapidSSL TLS RSA CA G1 Tue, 15 Dec 2026 23:59:59 +0000
RapidSSL TLS RSA CA G1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Tue, 02 Nov 2027 12:24:33 +0000
DigiCert Global Root G2 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Fri, 15 Jan 2038 12:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for root.lu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for root.lu <a href="https://domaindrift.io/t/root.lu"> <img src="https://domaindrift.io/badge/root.lu.svg" width="300" height="64" alt="DomainDrift signed observations for root.lu"> </a>

Ed25519 Receipt

Receipt ID
1713b5d5-a353-4f62-95ed-6c13ea267fb7
Output Hash
682191bd4ddf5e36f2195c2202eaa16f912c0daecc8bcf27246470e31706b84f
Signature
ed25519:e35fc7d8a0bdffcfa9c1b311ed9d157660b0a8cc68e35610bcf832cb6479662f74942eb575a8ff851f4ed5b0e01a60d352d108c2304739f8797c65d3c487b203
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser