CONTINUOUS INTERNET TELEMETRY24H DRIFT416 material changesacross 376 domains · -242 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,264 curated domains not answering+435 vs yesterdayERRORS21,689 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED60,326 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT416 material changesacross 376 domains · -242 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,264 curated domains not answering+435 vs yesterdayERRORS21,689 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED60,326 throttled or blocked our scanner429 rate-limit / 403 bot-block

norid.no

Observed Jul 18, 2026, 12:26 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onSikt - Kunnskapssektorens Tjenesteleverandor
Email byMicrosoft 365
Secured byLet's Encrypt
Registered withSIKT - KUNNSKAPSSEKTORENS TJENESTELEVERANDØR
Also usesZoomGoogle Search Console
IPv6 · 7 subdomains · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat norid.no actually stands on - every host below is a signed observation
norid.no
A / AAAA
45.67.13.4191.209.215.412001:700:4600:104::412001:700:4601:104::41
Sikt - Kunnskapssektorens Tjenesteleverandorserves the site
NS
y.nic.noz.nic.noauth01.trd.ns.norid.noauth02.osl.ns.norid.no+1 more
nic.no + norid.noanswers its DNS
MX
norid-no.mail.protection.outlook.com
Microsoft 365receives its email
TLS
www.norid.no
Let's Encryptissued its certificate

DNS Records

A 2

  • 45.67.13.41
  • 91.209.215.41

AAAA 2

  • 2001:700:4600:104::41
  • 2001:700:4601:104::41

MX 1

  • 0norid-no.mail.protection.outlook.com

TXT 6

  • MS=ms32734555
  • ZOOM_verify_QhdGUhxyS_-We0bdJnzI5w
  • apple-domain-verification=m9WcHY7mPXTnqqmy
  • google-site-verification=vluTft0FVO9noFg2bbtmuYnZe_4J8MwcxcTta48KBVI
  • v=spf1 include:spf.protection.outlook.com include:_spf-norid-prod.norid.no include:_spf-norid-misc.norid.no include:_spf.online.superoffice.com ~all
  • v=DMARC1; p=quarantine; sp=quarantine; ri=86400; rua=mailto:mailauth-reports@norid.no

NS 5

  • y.nic.no
  • z.nic.no
  • auth01.trd.ns.norid.no
  • auth02.osl.ns.norid.no
  • auth03.svg.ns.norid.no

SOA 1

  • pri01.trd.ns.norid.no hostmaster.norid.no

CAA 1

  • issue "letsencrypt.org; validationmethods=dns-01"

TLS Certificates (2)

Common NameIssuerExpires
www.norid.no C=US, O=Let's Encrypt, CN=R12 Wed, 19 Aug 2026 13:40:31 +0000
R12 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Fri, 12 Mar 2027 23:59:59 +0000

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for norid.no. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for norid.no <a href="https://domaindrift.io/t/norid.no"> <img src="https://domaindrift.io/badge/norid.no.svg" width="300" height="64" alt="DomainDrift signed observations for norid.no"> </a>

Ed25519 Receipt

Receipt ID
d57e453e-33ed-4dca-9313-9c4515631820
Output Hash
5c0a4d25ed1b7529139d6c268d809dce72690059a836939e2eda4765755fa114
Signature
ed25519:890547b33e419c51338527f8d77cfeb28fb3bad813d8f704cbc4d51e4691eb520470348cf158d408f19d5bacf4714078567ab6cb5a241151029a44f268ed5503
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser