CONTINUOUS INTERNET TELEMETRY24H DRIFT2,100 material changesacross 1,955 domains · +22 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.comEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW1,283 curated domains not answering+157 vs yesterdayERRORS10,025 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED27,169 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,100 material changesacross 1,955 domains · +22 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.comEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW1,283 curated domains not answering+157 vs yesterdayERRORS10,025 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED27,169 throttled or blocked our scanner429 rate-limit / 403 bot-block

online.no

Observed Jul 18, 2026, 12:53 UTC (13h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onMicrosoft Corporation
Secured byLet's Encrypt
Also usesFacebook/Meta
1 subdomain · tranco_10k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat online.no actually stands on - every host below is a signed observation
online.no
A / AAAA
20.100.134.111
Microsoft Corporationserves the site
NS
ns2.nextra.nons1.nextra.no
nextra.noanswers its DNS
MX
mx1c60.megamailservers.eumx3c60.megamailservers.eumx2c60.megamailservers.eumx4c60.megamailservers.eu
megamailservers.eureceives its email
TLS
www.online.no
Let's Encryptissued its certificate

DNS Records

A 1

  • 20.100.134.111

MX 4

  • 10mx1c60.megamailservers.eu
  • 110mx3c60.megamailservers.eu
  • 100mx2c60.megamailservers.eu
  • 120mx4c60.megamailservers.eu

TXT 5

  • facebook-domain-verification=vfmkcv16aybcg1ojpsya8xtlwmgoj8
  • _cmpcnuvvd86ux2sqqngmswtpbknpvzw
  • v=spf1 include:spf.online.no include:spfc60.megamailservers.eu -all
  • 804b32734bb6bd81242b72b4d6eb540ec09bb2629f0f284ab70bec20d812a09a
  • v=DMARC1; p=reject; sp=reject; aspf=s; adkim=r; fo=1; ri=86400; rua=mailto:abuse@telenor.net; ruf=mailto:abuse@telenor.net

NS 2

  • ns2.nextra.no
  • ns1.nextra.no

SOA 1

  • ns1.nextra.no hostmaster.telenor.net

CAA 14

  • issuevmc "digicert.com"
  • iodef "mailto:hostmaster@telenor.net"
  • issuewild "telenor.net"
  • issue "buypass.no"
  • issuewild "usertrust.com"
  • issue "trust-provider.com"
  • issue "digicert.com"
  • issue "letsencrypt.org"
  • issue "usertrust.com"
  • issue "sectigo.com"

TLS Certificates (3)

Common NameIssuerExpires
www.online.no C=US, O=Let's Encrypt, CN=YR1 Mon, 14 Sep 2026 09:59:57 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for online.no. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for online.no <a href="https://domaindrift.io/t/online.no"> <img src="https://domaindrift.io/badge/online.no.svg" width="300" height="64" alt="DomainDrift signed observations for online.no"> </a>

Ed25519 Receipt

Receipt ID
fa4ac60c-79ff-4699-9360-b0fd436943fe
Output Hash
f63519ac06d808340a53f051dbc37e124a5701b470afad3eb18ce52d4af8cba1
Signature
ed25519:9810df2129aea030e49adde2dda834799270f5430bbde7eabd2bddb05de7f1e7120448e53d74279db4bbfee71c0267b30e3701dd3052e20c25a4480330babb0f
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser