CONTINUOUS INTERNET TELEMETRY24H DRIFT3,093 material changesacross 2,827 domains · -305 vs yesterdayDNS DRIFT18 domains changed DNS providertop destination cloudflare.com · -9 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT6 domains switched issuing CA24h · -1 vs yesterdayNOW3,326 curated domains not answering-6,392 vs yesterdayERRORS10,912 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,093 material changesacross 2,827 domains · -305 vs yesterdayDNS DRIFT18 domains changed DNS providertop destination cloudflare.com · -9 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT6 domains switched issuing CA24h · -1 vs yesterdayNOW3,326 curated domains not answering-6,392 vs yesterdayERRORS10,912 responded with an errorlast probe · 5xx / 404 / 429 / 403

novonordisk.com

Observed 2026-07-12T20:06:43.642Z (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMimecast
Also usesMiroDocuSignGoogle Search ConsoleAtlassian
14 subdomains · pharma_biotech
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat novonordisk.com actually stands on - every host below is a signed observation
novonordisk.com
A / AAAA
52.166.181.85
Cloudflareserves the site
NS
ns1.novonordisk.comns2.novonordisk.com
novonordisk.comanswers its DNS
MX
de-smtp-inbound-1.mimecast.comde-smtp-inbound-2.mimecast.com
Mimecastreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → http://www.novonordisk.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time943 ms
DNS resolutionNOERROR
Redirect chain
http://www.novonordisk.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 52.166.181.85

MX 2

  • 10de-smtp-inbound-1.mimecast.com
  • 10de-smtp-inbound-2.mimecast.com

TXT 58

  • miro-verification=51ef10e33bebcad84608423eb9772aea97781d8e
  • 51x6z8bg6nl8bpbmjbd7hj9vzhx25fks
  • infoblox-domain-mastery=82d7b7cdaf2810666d5d09382501dd4d47532684c445c8f06a83db59b4324dd7f6
  • zscaler-verification-103564150-12132025-K3wNnYLpSy
  • onetrust-domain-verification=01af2d2b32a64f7688d0ae4f503c638c
  • dtm-domain-verification=hRgZ5jXszlH_iQxO9almoEJdRJ9U2HbwFWOOtzwOfh4
  • t2flry2mk21mnxl97jttmk9nq97j114m
  • 8rg8p4mt961jtgjg839w85mgvwxzyfkn
  • 95r9sf82yv0f28y20hr47hz5fvsn05jz
  • y44l5flqyqcv4c2kyp23fb9704n25vbx

NS 2

  • ns1.novonordisk.com
  • ns2.novonordisk.com

SOA 1

  • ns1.novonordisk.com domains.nnit.com

TLS Certificates (0)

None.

Subdomains (14)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for novonordisk.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for novonordisk.com <a href="https://domaindrift.io/t/novonordisk.com"> <img src="https://domaindrift.io/badge/novonordisk.com.svg" width="300" height="64" alt="DomainDrift signed observations for novonordisk.com"> </a>

Ed25519 Receipt

Receipt ID
279dcf29-1087-4b3e-8172-f90f36ac8cad
Output Hash
fe542a0844a649fcdb3e0b0c3a38d3b571f18962624c3f813974b321741a6be2
Signature
ed25519:cb68ebc95f400236b538c40cf3c38646f861a4941e3d1abc1f9bd5696001ccd1df3730b711f7607de7c108cbde25a140f5d112c6b36bc4b4cf7cddb2ee321b0c
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser