CONTINUOUS INTERNET TELEMETRY24H DRIFT3,042 material changesacross 2,702 domains · -356 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination cloudflare.com · -2 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,042 material changesacross 2,702 domains · -356 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination cloudflare.com · -2 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 403

ndr.de

Observed 2026-07-13T00:20:34.272163270+00:00 (12h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onGoogle
Email byMicrosoft 365
Secured byGoogle Trust Services
Also usesAtlassianGoogle Search ConsoleMiroFacebook/Meta
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ndr.de actually stands on - every host below is a signed observation
ndr.de
A / AAAA
34.120.212.72
Googleserves the site
NS
ns-cloud-e1.googledomains.comns-cloud-e2.googledomains.comns-cloud-e3.googledomains.comns-cloud-e4.googledomains.com
googledomains.comanswers its DNS
MX
ndr-de.mail.protection.outlook.com
Microsoft 365receives its email
TLS
ndr.de
Google Trust Servicesissued its certificate

DNS Records

A 1

  • 34.120.212.72

MX 1

  • 0ndr-de.mail.protection.outlook.com

TXT 9

  • atlassian-domain-verification=gkV/MyNeBulRCud7iJVxcnS8Je9mui6WRp25WLobRklwp48gzlZL6/I5Eh8r9IxD
  • v=spf1 ip4:194.113.141.20 include:spf.protection.outlook.com include:spf.ndr.de include:spf.de.umantis.com include:spf.qb-feedback.com ip4:81.209.250.80 ip4:81.209.250.76 ip4:81.209.250.78 ip4:83.133.243.211 ip4:20.67.109.20 include:_pui.sr.de include:spf.sosafe.de -all
  • google-site-verification=iwVoxBMq7hRa0iYCxPieWtC-s7fyJGBT3fWvIxGUe1M
  • MS=ms28619877
  • NhQ/677HBcNBEIR+gnl++KRSuwpmDhYJRxM7/mUzghCZiapJrmMU+qMdBfDhNcxtCNRrgLByw3+dXUFNy3vcBw==
  • miro-verification=ed3cad95eac9bbd2580e05f99d4c5d8586c1dda4
  • facebook-domain-verification=x159mgan9crfavdpk2v0vce38bb9lg
  • d365mktkey=x6olhrjOO3xdI1xmCk9VZuvARkq0QjyDdk7zbzNIxcUx
  • v=DMARC1; p=quarantine; rua=mailto:zlaueng6@rua.eu.dmarcmanager.app; ruf=mailto:zlaueng6@ruf.eu.dmarcmanager.app

NS 4

  • ns-cloud-e1.googledomains.com
  • ns-cloud-e2.googledomains.com
  • ns-cloud-e3.googledomains.com
  • ns-cloud-e4.googledomains.com

SOA 1

  • ns-cloud-e1.googledomains.com cloud-dns-hostmaster.google.com

SRV 2

  • hhloktelucof01.ndr.de:5222 p5
  • hhloktelucof01.ndr.de:5269 p5

TLS Certificates (3)

Common NameIssuerExpires
ndr.de C=US, O=Google Trust Services, CN=WR3 Wed, 19 Aug 2026 01:51:11 +0000
WR3 C=US, O=Google Trust Services LLC, CN=GTS Root R1 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R1 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ndr.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ndr.de <a href="https://domaindrift.io/t/ndr.de"> <img src="https://domaindrift.io/badge/ndr.de.svg" width="300" height="64" alt="DomainDrift signed observations for ndr.de"> </a>

Ed25519 Receipt

Receipt ID
dfbc3928-3460-4501-9aa1-fa4cafb9fa83
Output Hash
1b0ab246f66e6f42815b03a2ecfc6fa4f7fd2ff28d000ee9e51d303d8b93ffeb
Signature
ed25519:6603faf79e0609614534294fecc037afbfd6e37f154d2dc580a0d416bc1be05d49209a4eceaa317a6db43bcfa434af74be398870faad569ceeaeedea5b57d502
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser