CONTINUOUS INTERNET TELEMETRY24H DRIFT1,971 material changesacross 1,832 domains · last 24h · -6,863 vs yesterdayDNS DRIFT62 domains changed DNS providertop destination cloudflare.com · -215 vs yesterdayEMAIL DRIFT12 domains switched email providertop destination outlook.com · -42 vs yesterdayCERT DRIFT18 domains switched issuing CA24h · -55 vs yesterdayNOW500 curated domains not reachable-57 vs yesterdaySITE ERRORS34,149 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 145,199 sites429 rate-limit / 403 bot-block, a posture signal

rema.no

Observed Jul 28, 2026, 19:22 UTC (3h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Secured byGoogle Trust Services
Also usesGoogle Search ConsoleMiroAtlassian
tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rema.no actually stands on - every host below is a signed observation
rema.no
A / AAAA
162.159.153.241
Cloudflareserves the site
NS
d.ns.isp.as2116.neta.ns.isp.as2116.netb.ns.isp.as2116.netc.ns.isp.as2116.net
as2116.netanswers its DNS
MX
rema-no.mail.protection.outlook.com
Microsoft 365receives its email
TLS
rema.no
Google Trust Servicesissued its certificate

DNS Records

A 1

  • 162.159.153.241

MX 1

  • 10rema-no.mail.protection.outlook.com

TXT 19

  • apple-domain-verification=N5WYY567pmnK6VU4
  • google-site-verification=19jt17n6--FoyKMfgbBIBQ_-plTpfwKL0skMADfkM_8
  • miro-verification=44aba939d6d294977afd952ca0f05017f1ebccd2
  • postman-domain-verification=0366254457a8895122749be7e226334035ca230ac1ccdb0de2218af410eee5c0e5334b9aba2339fddb3673374b5a53cc4171d6ffc7cc08acfb8edc22af8cbf77
  • 3QGcqDrlkVchbGcsQBysHViF7jMJuNNd8XREuO4Bkd/AxstWz42X34sqXSyMF6kGa03e3j76kh47chH/2OdIjw==
  • zfTAp71vrc7YEZoZ2ZHn6nKZXr2vUpWyVopDWaZ6NfSDJI6jxaZugH6q/vNn9nBjAYvpryUWOaxKDUNpZ+7nAA==
  • ca3-35a71d0b24b745caa409a07a6648c9af
  • teamviewer-sso-verification=a33ca0dd159f4727aa4ce12ba22e479d
  • lucid-verification=<pva@YWE0quk7wtw9klb>
  • Foxit-domain-verification=8cfc1d62395497b9d91ce6fe0705bec8

NS 4

  • d.ns.isp.as2116.net
  • a.ns.isp.as2116.net
  • b.ns.isp.as2116.net
  • c.ns.isp.as2116.net

SOA 1

  • ns.isp.as2116.net hostmaster.ns.isp.as2116.net

SRV 4

  • vcse2.vaas.no:5060 p20
  • vcse1.vaas.no:5060 p10
  • vcse2.vaas.no:5061 p20
  • vcse1.vaas.no:5061 p10

CAA 5

  • issue "sectigo.com"
  • issue "digicert.com"
  • iodef "mailto:certificate@rema.no"
  • issue "pki.goog"
  • issue "entrust.net"

TLS Certificates (3)

Common NameIssuerExpires
rema.no C=US, O=Google Trust Services, CN=WE1 Sun, 30 Aug 2026 11:40:04 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for rema.no. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for rema.no <a href="https://domaindrift.io/t/rema.no"> <img src="https://domaindrift.io/badge/rema.no.svg" width="300" height="64" alt="DomainDrift signed observations for rema.no"> </a>

Ed25519 Receipt

Receipt ID
rcpt_b0076e4a9800a6ba
Output Hash
baaa09d918c21241882016303918e4d4bffc2fdc71c058d74c7fa792da44a773
Signature
ed25519:fa6f603416e0df9993ae2834cce9ad2a7d9c990552299e0ee32fed811c77469d375b0bad83631b838d46d940f02acbd1d2fa143a25472373b135e95e6928b502
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser