CONTINUOUS INTERNET TELEMETRY24H DRIFT154 material changesacross 106 domains · +8 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,351 curated domains not answeringlast probe, steadyERRORS28,433 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,471 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT154 material changesacross 106 domains · +8 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,351 curated domains not answeringlast probe, steadyERRORS28,433 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,471 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

northwesternmutual.com

Observed Jul 18, 2026, 12:51 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onNorthwestern Mutual Life Insurance Company
Email byProofpoint
Secured byDigiCert
Registered withCSC Corporate Domains, Inc.
Also usesAtlassianDocuSignGoogle Search ConsoleDocker
1 subdomain · tranco_10k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat northwesternmutual.com actually stands on - every host below is a signed observation
northwesternmutual.com
A / AAAA
216.20.178.205
Northwestern Mutual Life Insurance Companyserves the site
NS
auth01.ns.uu.netmkn-z3-ib-internet.northwesternmutual.comauth61.ns.uu.netdc1-ext-ddi-01a.nml.com+1 more
uu.net + northwesternmutual.com + moreanswers its DNS
MX
mxa-00170901.gslb.pphosted.commxb-00170901.gslb.pphosted.com
Proofpointreceives its email
TLS
northwesternmutual.com
DigiCert Incissued its certificate

DNS Records

A 1

  • 216.20.178.205

MX 2

  • 10mxa-00170901.gslb.pphosted.com
  • 10mxb-00170901.gslb.pphosted.com

TXT 29

  • 00DA0000000KjiR=1TBHo000000wk3A
  • adobe-idp-site-verification=f8fda0c6-32a4-4e5b-980c-66902c04f0fe
  • v=verifydomain MS=ms92604413
  • zjk7U2IJTci6A8+qjf4RoSCMccjzwQz12DqIjOQUa0mvRJ0vXWu6ZMNycL0LNOX8IOInzH0x+vXwETBXSp24tA==
  • atlassian-domain-verification=renKJYR7aL33Ajua24JwDVlTJ/RmZJTKmtivFaaxlfIwj8kaPhAaQQfJS4jYFeoa
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ip4:64.186.197.0/24 ip4:67.231.145.103/32 ip4:67.231.153.91/32 ip4:12.45.141.253/32 ip4:208.235.248.20/32 ip4:216.20.179.0/29 ~all
  • docusign=d37e15b7-440e-49f0-9178-af6bcb470f13
  • bugcrowd-verification=fba4bd0cac410477db5dd89968448d25
  • google-site-verification=RK5tA9BxBJA7JyiKggO9kTGm6YWqiKspeCAKaWpSRwE
  • docusign=773fe55f-6301-4901-9314-b3f5a3433762

NS 5

  • auth01.ns.uu.net
  • mkn-z3-ib-internet.northwesternmutual.com
  • auth61.ns.uu.net
  • dc1-ext-ddi-01a.nml.com
  • fk1-z6-ib-internet.northwesternmutual.com

SOA 1

  • fk1-z6-ib-internet.northwesternmutual.com hostmaster.nsfde.ho.nmfco.com

CAA 5

  • iodef "mailto:dl-caa@northwesternmutual.com"
  • issue "digicert.com"
  • issue "entrust.net"
  • issue "amazon.com"
  • issue "letsencrypt.org"

TLS Certificates (3)

Common NameIssuerExpires
northwesternmutual.com C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=Thawte TLS RSA CA G1 Thu, 28 Jan 2027 23:59:59 +0000
Thawte TLS RSA CA G1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Tue, 02 Nov 2027 12:24:25 +0000
DigiCert Global Root G2 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Fri, 15 Jan 2038 12:00:00 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for northwesternmutual.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for northwesternmutual.com <a href="https://domaindrift.io/t/northwesternmutual.com"> <img src="https://domaindrift.io/badge/northwesternmutual.com.svg" width="300" height="64" alt="DomainDrift signed observations for northwesternmutual.com"> </a>

Ed25519 Receipt

Receipt ID
b3592bfb-175b-4476-afad-62ea3916e8e6
Output Hash
ed4b8247a0c3317add3d46c0b02efaecf0706fa7f04b7c92325ef78a2be6db4c
Signature
ed25519:0dd683815eff0b43c491fe03357417735659bec2e26a2b566d05651b77990bb416e59f030203e029dee2a44c7d3c0efffc87ae21a31ab103faf36d082b389f04
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser