CONTINUOUS INTERNET TELEMETRY24H DRIFT1,703 material changesacross 1,502 domains · +281 vs yesterdayDNS DRIFT8 domains changed DNS providertop destination parity.domains · -13 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination outlook.com · -2 vs yesterdayNOW904 curated domains not answering+194 vs yesterdayERRORS4,202 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,860 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,703 material changesacross 1,502 domains · +281 vs yesterdayDNS DRIFT8 domains changed DNS providertop destination parity.domains · -13 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination outlook.com · -2 vs yesterdayNOW904 curated domains not answering+194 vs yesterdayERRORS4,202 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,860 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

lvr.de

Observed 2026-07-17T14:06:14.162987027+00:00 (17h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onVodafone
Secured byDeutsche Telekom Security GmbH
Also usesGoogle Search Console
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat lvr.de actually stands on - every host below is a signed observation
lvr.de
A / AAAA
194.149.241.112
Vodafoneserves the site
NS
dns20.lvr.dedns10.lvr.de
lvr.deanswers its DNS
MX
mail20.lvr.demail10.lvr.de
lvr.dereceives its email
TLS
*.lvr.de
Deutsche Telekom Security GmbHissued its certificate

DNS Records

A 1

  • 194.149.241.112

MX 2

  • 50mail20.lvr.de
  • 50mail10.lvr.de

TXT 8

  • vanity-url request TS0418326
  • D-TRUST=BA5IDLX6WDHK99COEI2IJNP
  • _telesec-domain-validation=358301_2026-03-16_L8aWD4jBkDlULRQZ9CVfYlUwjl0iu8ZCJgv02FiPSLjJwVO92t
  • v=spf1 a mx a:mail30.lvr.de a:mail40.lvr.de ip4:195.37.138.179 ip4:193.174.240.41 include:spf.u2d.de ~all
  • _pki-validation.lvr-cloud-client.lvr.de=2085-8276-281E-FFF0-D7D2-666A-E242-4379
  • google-site-verification=9YGkjq5yeh6BspK3QYBecMOhLP2LgYyYkrq3mZyfCOk
  • MS=7733C28A25F6D17097F63F1A643C38AB04F71095
  • v=DMARC1;p=none;sp=none;pct=100;rua=mailto:dmarc@lvr.de;ruf=mailto:dmarc@lvr.de;ri=604800;aspf=r;adkim=r;fo=1;

NS 2

  • dns20.lvr.de
  • dns10.lvr.de

SOA 1

  • dns10.lvr.de domains.lvr.de

TLS Certificates (2)

Common NameIssuerExpires
*.lvr.de C=DE, O=Deutsche Telekom Security GmbH, CN=Telekom Security ServerID OV Class 2 CA Sun, 26 Jul 2026 23:59:59 +0000
Telekom Security ServerID OV Class 2 CA C=DE, O=T-Systems Enterprise Services GmbH, 2.5.4.11=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2 Mon, 02 Aug 2027 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for lvr.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for lvr.de <a href="https://domaindrift.io/t/lvr.de"> <img src="https://domaindrift.io/badge/lvr.de.svg" width="300" height="64" alt="DomainDrift signed observations for lvr.de"> </a>

Ed25519 Receipt

Receipt ID
f395af52-75ae-4a58-8c5c-b2c8cf30bc46
Output Hash
a26a5bbdd16af807d8d76bc525cf1e22cf0c1c81059cbb0e37fbbdc1e28a0143
Signature
ed25519:15c069df1e5c63f7af09646c645d95a3e852f5fb1b7a15959572febc90dc222bdcb7e71079be8a6960a3191073af69ce5bd1c25645cfb6bd17c7cacd4f34f80d
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser