CONTINUOUS INTERNET TELEMETRY24H DRIFT680 material changesacross 598 domains · +226 vs yesterdayDNS DRIFT14 domains changed DNS providertop destination seizedservers.com · +10 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination pphosted.com · +1 vs yesterdayNOW2,431 curated domains not answering+216 vs yesterdayERRORS9,407 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,547 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT680 material changesacross 598 domains · +226 vs yesterdayDNS DRIFT14 domains changed DNS providertop destination seizedservers.com · +10 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination pphosted.com · +1 vs yesterdayNOW2,431 curated domains not answering+216 vs yesterdayERRORS9,407 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,547 throttled or blocked our scanner429 rate-limit / 403 bot-block

cwi.nl

Observed 2026-07-15T05:53:46.066Z (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Registered withSURF B.V.
Also usesZoom
12 subdomains · tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat cwi.nl actually stands on - every host below is a signed observation
cwi.nl
A / AAAA
192.16.191.48
Cloudflareserves the site
NS
dwalin.nikhef.nlns1.zurich.surf.netns2.cwi.nlns1.cwi.nl
nikhef.nl + surf.net + moreanswers its DNS
MX
mx.soverin.net
soverin.netreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.cwi.nl/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time833 ms
DNS resolutionNOERROR
Redirect chain
https://www.cwi.nl/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 192.16.191.48

MX 1

  • 10mx.soverin.net

TXT 13

  • ZOOM_verify_-TwabqfPQI2RrsWzDjTwfQ
  • HARICA-SnDN4Irx82qOUXNni8S
  • MS=ms63043750
  • v=spf1 ip4:192.16.191.0/27 ip4:192.174.88.179 ip4:192.174.88.180 ip4:13.58.74.171 include:_spf.surfmailfilter.nl include:projects5.greenlightsolutions.nl include:spf.protection.outlook.com ~all
  • adobe-idp-site-verification=a8667c98581a66df82f18dd9b4ec9ad04d2b0214fda298afa04b69ae89b16b4d
  • Centrum Wiskunde & Informatica
  • CWI (Centrum Wiskunde & Informatica)=pnqgTeOiurzbz4yD
  • Science Park 123, 1098 XG Amsterdam, Netherlands
  • ZOOM_verify_QtFtKLPNUTBlqUfH6kXTNZ
  • apple-domain-verification=vKvt2VfbB2WZUhzQ

NS 4

  • dwalin.nikhef.nl
  • ns1.zurich.surf.net
  • ns2.cwi.nl
  • ns1.cwi.nl

SOA 1

  • ns1.cwi.nl hostmaster.cwi.nl

TLS Certificates (0)

None.

Subdomains (12)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cwi.nl. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for cwi.nl <a href="https://domaindrift.io/t/cwi.nl"> <img src="https://domaindrift.io/badge/cwi.nl.svg" width="300" height="64" alt="DomainDrift signed observations for cwi.nl"> </a>

Ed25519 Receipt

Receipt ID
2b474bbc-aef3-45d9-ad04-24688059093e
Output Hash
9f0c00680db0087ac1f6d2de00f86691c70046161f059e3355e2993e75526e73
Signature
ed25519:e633af1d9c9698f9602de2bb4eb2f283a21f61694c3e8fbc0182211ed72b60ccabf84073ffe9a3f0b85e3e8cf7b5586ddedfeb376c0b01dc00fec355ed2c020e
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser