CONTINUOUS INTERNET TELEMETRY24H DRIFT1,427 material changesacross 1,206 domains · +973 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination pphosted.com · +5 vs yesterdayNOW376 curated domains not answering-1,839 vs yesterdayERRORS2,459 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,182 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,427 material changesacross 1,206 domains · +973 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination parity.domains · +21 vs yesterdayEMAIL DRIFT7 domains switched email providertop destination pphosted.com · +5 vs yesterdayNOW376 curated domains not answering-1,839 vs yesterdayERRORS2,459 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,182 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

hrworks.de

Observed 2026-07-17T14:23:31.081194558+00:00 (6h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCombell NV
Email byGoogle Workspace
Secured byLet's Encrypt
Also usesAtlassianGoogle Search ConsoleHubSpot
IPv6 · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat hrworks.de actually stands on - every host below is a signed observation
hrworks.de
A / AAAA
185.175.196.172a00:1c98:60:1030::1707:a5ab
Combell NVserves the site
NS
ns-1374.awsdns-43.orgns-1941.awsdns-50.co.ukns-276.awsdns-34.comns-876.awsdns-45.net
awsdns-43.org + awsdns-50.co.uk + moreanswers its DNS
MX
aspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.comaspmx4.googlemail.com+3 more
Google Workspacereceives its email
TLS
hrworks.de
Let's Encryptissued its certificate

DNS Records

A 1

  • 185.175.196.17

AAAA 1

  • 2a00:1c98:60:1030::1707:a5ab

MX 7

  • 1aspmx.l.google.com
  • 10aspmx2.googlemail.com
  • 10aspmx3.googlemail.com
  • 10aspmx4.googlemail.com
  • 10aspmx5.googlemail.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 6

  • MS=62F80024BEB04028E7D26D8375E4D445F925D1DD
  • atlassian-domain-verification=au/4/j1cRBUcn0M7t/ENSgyuobbQoogsH2gjSIOa5pTYc9PvODFQbC3Vzk0NS1my
  • google-site-verification=tirtV3V6rMLcgGEChuC5m68Q7ci0eHrYS0wEnLW7yE8
  • v=spf1 a mx include:_spf.google.com include:amazonses.com include:7520470.spf04.hubspotemail.net ip4:37.24.51.158 ~all
  • v=DMARC1;p=quarantine;rua=mailto:dmarcreports@hrworks.de; aspf=r
  • v=BIMI1; l=https://d3nnb1hxumbr0v.cloudfront.net/images/logos2021Relaunch/hrw_bimi.svg

NS 4

  • ns-1374.awsdns-43.org
  • ns-1941.awsdns-50.co.uk
  • ns-276.awsdns-34.com
  • ns-876.awsdns-45.net

SOA 1

  • ns-1941.awsdns-50.co.uk awsdns-hostmaster.amazon.com

CAA 3

  • issue "amazonaws.com"
  • issue "digicert.com"
  • issue "letsencrypt.org"

TLS Certificates (2)

Common NameIssuerExpires
hrworks.de C=US, O=Let's Encrypt, CN=R13 Sat, 22 Aug 2026 20:35:11 +0000
R13 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Fri, 12 Mar 2027 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for hrworks.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for hrworks.de <a href="https://domaindrift.io/t/hrworks.de"> <img src="https://domaindrift.io/badge/hrworks.de.svg" width="300" height="64" alt="DomainDrift signed observations for hrworks.de"> </a>

Ed25519 Receipt

Receipt ID
989d4bd8-e518-4ea7-b46c-43bb6f542171
Output Hash
8b65dea55d25d934fea5ac578408e4fb71e18c9abceff8c13207567426dc8b4f
Signature
ed25519:fa6431ec6034787d91fce763c9f6d8ff22157ee318118da263b892af98b5833f9b9d41982ae61d930020b20b12819cd8d9a955a83504b0cec7a6985550fd940a
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser