CONTINUOUS INTERNET TELEMETRY24H DRIFT812 material changesacross 728 domains · +358 vs yesterdayDNS DRIFT20 domains changed DNS providertop destination parity.domains · +16 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination pphosted.com · +3 vs yesterdayNOW2,571 curated domains not answering+356 vs yesterdayERRORS9,927 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,702 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT812 material changesacross 728 domains · +358 vs yesterdayDNS DRIFT20 domains changed DNS providertop destination parity.domains · +16 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination pphosted.com · +3 vs yesterdayNOW2,571 curated domains not answering+356 vs yesterdayERRORS9,927 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,702 throttled or blocked our scanner429 rate-limit / 403 bot-block

man.eu

Observed 2026-07-15T00:56:30.394Z (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesDocuSignGoogle Search ConsoleFacebook/MetaAtlassian
5 subdomains · automotive
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat man.eu actually stands on - every host below is a signed observation
man.eu
A / AAAA
151.101.67.10151.101.39.10151.101.131.10151.101.3.10+1 more
Cloudflareserves the site
NS
anycast96.irondns.netanycast97.irondns.euns98.irondns.de
irondns.net + irondns.eu + moreanswers its DNS
MX
mxa-00902303.gslb.pphosted.commxb-00902303.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.man.eu/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time561 ms
DNS resolutionNOERROR
Redirect chain
https://www.man.eu/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 5

  • 151.101.67.10
  • 151.101.39.10
  • 151.101.131.10
  • 151.101.3.10
  • 151.101.195.10

MX 2

  • 10mxa-00902303.gslb.pphosted.com
  • 10mxb-00902303.gslb.pphosted.com

TXT 31

  • pardot876821=ee6ab585f4befeef8fd1eef7a531b8624890944e84bb8bbd6e7797680127a0d7
  • docusign=2a03ad12-c7d2-4928-bcdd-29485d1aa8c1
  • brevo-code:24faf40251839fa3b567fa8d51c5c3bf
  • 51c81a6c-00e1-4684-8ac1-a1589ec172d1
  • google-site-verification=qMqi8Lcg_gicCdmbH-5cTENiFQyI_OjaCAvrBkhuyPU
  • fcybk4zyvp3gyh8rtnxynljsf1trnm38
  • linkedin-site-verification=011826e0-7921-4a86-87bb-b11b70b78ec2
  • google-site-verification=Ubu8Pz9C8WpeTn0rH4IzC1IBOydICDWpHHmWu3gKDTQ
  • _xyqg8s28wa8v7rj8zpyjz06ggvkgan8
  • globalsign-domain-verification=UNRjZwxYegMxMMqJ2-GJNDdHIpubpK8ovnYm9jqw-1

NS 3

  • anycast96.irondns.net
  • anycast97.irondns.eu
  • ns98.irondns.de

SOA 1

  • ns98.irondns.de dnsmaster.irondns.net

TLS Certificates (0)

None.

Subdomains (5)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for man.eu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for man.eu <a href="https://domaindrift.io/t/man.eu"> <img src="https://domaindrift.io/badge/man.eu.svg" width="300" height="64" alt="DomainDrift signed observations for man.eu"> </a>

Ed25519 Receipt

Receipt ID
f21ace25-bd0c-4e31-ab5a-9317dad76f1a
Output Hash
35d88a6fc6bd4a7f803b3eceb2dc179d4cf382a6355850c95259afc700438191
Signature
ed25519:83829467af8cf846fd6284e28d06decd7787d9b365bc9592a5617e349d79a758f296bf1f13e8f32248eea6e2bffaa5ed03088bedca88ccdb62efd8c6c9a5ed01
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser