CONTINUOUS INTERNET TELEMETRY24H DRIFT2,688 material changesacross 2,488 domains · +1,266 vs yesterdayDNS DRIFT11 domains changed DNS providertop destination cloudflare.com · -10 vs yesterdayEMAIL DRIFT9 domains switched email providertop destination google.com · +4 vs yesterdayCERT DRIFT36 domains switched issuing CA24h · +36 vs yesterdayNOW386 curated domains not answering-324 vs yesterdayERRORS2,386 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,349 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,688 material changesacross 2,488 domains · +1,266 vs yesterdayDNS DRIFT11 domains changed DNS providertop destination cloudflare.com · -10 vs yesterdayEMAIL DRIFT9 domains switched email providertop destination google.com · +4 vs yesterdayCERT DRIFT36 domains switched issuing CA24h · +36 vs yesterdayNOW386 curated domains not answering-324 vs yesterdayERRORS2,386 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED8,349 throttled or blocked our scanner429 rate-limit / 403 bot-block

mvv.de

Observed 2026-07-18T12:25:19.169950074+00:00 (1h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onAmazon
Email byHubSpot
Secured byLet's Encrypt
Also usesFacebook/Meta
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat mvv.de actually stands on - every host below is a signed observation
mvv.de
A / AAAA
52.29.127.0
Amazonserves the site
NS
ns1.manet.deabel-1.mvv.deabel-2.mvv.de
manet.de + mvv.deanswers its DNS
MX
mx02.hornetsecurity.commx03.hornetsecurity.commx04.hornetsecurity.commx01.hornetsecurity.com
HubSpotreceives its email
TLS
mvv.de
Let's Encryptissued its certificate

DNS Records

A 1

  • 52.29.127.0

MX 4

  • 20mx02.hornetsecurity.com
  • 30mx03.hornetsecurity.com
  • 40mx04.hornetsecurity.com
  • 10mx01.hornetsecurity.com

TXT 9

  • B7CGIzSQR67ZBzRz/g0DvoI/ImkMi+wIJWT6rJIOTcmXHe8rJf1y0EtckEQzr9L+GcyJECX3XYD7HuFUjXo8zg==
  • eQ78s4+JZKdXe4ejPEpIX/h9JLwj8e7yflKuaEyVCQm53+DHkrL/Nt2V0iiDB8A5YLt7u7n021JGMz/bJ+mQWg==
  • v=spf1 a mx include:spf.hornetsecurity.com ip4:83.246.65.0/24 ip4:217.64.175.0/24 ip4:94.100.128.0/20 ip4:212.65.8.0/24 ip4:193.242.121.220 ip4:193.242.121.221 ip4:193.242.121.222 ip4:194.97.156.179 ip4:46.252.18.212 ip4:93.94.83.171 ip4:46.163.105.69 ip4:46.20.47.88/29 ip4:85.14.241.64/29 ip4:192.254.127.96/27 ip4:18.208.124.128/25 ip4:3.93.157.0/24 ip4:167.89.107.129/32 ip4:167.89.107.125/32 ip4:167.89.107.127/32 ip4:54.174.60.0/23 ip4:50.31.57.60/31 ip4:50.31.57.62/32 ip4:50.31.57.54/31 ip4:54.174.53.128/30 ip4:54.174.59.0/24 ip4:54.174.63.0/24 ip4:167.89.31.192/29 ip4:54.174.52.0/24 ip4:167.89.35.200/32 ip4:167.89.107.136/32 ip4:50.31.44.111/32 ip4:139.180.17.0/24 ip4:54.174.57.0/24 ip4:51.89.73.208/28 ip4:147.135.249.48/28 ip4:54.37.79.226 include:1624082.spf10.hubspotemail.net ~all
  • MS=ms98263102
  • zscaler-verification-18365544-7102025-KQqpFN
  • facebook-domain-verification=19s1o9xrkm9s7ziiwhxt4gh7efjpyt
  • onetrust-domain-verification=e068e35c46114e3f9d0c6582739963fe
  • zapier-domain-verification-challenge=19ecda65-d788-4cb6-8118-bc08f0cb1979
  • v=DMARC1; p=none;

NS 3

  • ns1.manet.de
  • abel-1.mvv.de
  • abel-2.mvv.de

SOA 1

  • abel-1.mvv.de dns.soluvia.de

SRV 1

  • mailgw.soluvia-it-services.de:443 p0

TLS Certificates (4)

Common NameIssuerExpires
mvv.de C=US, O=Let's Encrypt, CN=YE1 Thu, 27 Aug 2026 02:12:38 +0000
YE1 C=US, O=ISRG, CN=Root YE Sat, 02 Sep 2028 23:59:59 +0000
Root YE C=US, O=Internet Security Research Group, CN=ISRG Root X2 Thu, 02 Sep 2032 23:59:59 +0000
ISRG Root X2 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mvv.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for mvv.de <a href="https://domaindrift.io/t/mvv.de"> <img src="https://domaindrift.io/badge/mvv.de.svg" width="300" height="64" alt="DomainDrift signed observations for mvv.de"> </a>

Ed25519 Receipt

Receipt ID
2faa9619-7017-43c1-9631-4f953a67dec3
Output Hash
a732794803a3feb780af6706ddea521d01b19da9262eba9d8785af1ea6dee3ba
Signature
ed25519:34c9dd9ce85cb77fad47d0209040ed0875f4c8afc786f275cf8ac032af74ecb8feee86a18d984d4c160b12bbc3ffd755d0befea60b22863dedb5c188af11510e
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser