CONTINUOUS INTERNET TELEMETRY24H DRIFT2,994 material changesacross 2,717 domains · -404 vs yesterdayDNS DRIFT19 domains changed DNS providertop destination cloudflare.com · -8 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.comCERT DRIFT6 domains switched issuing CA24h · -1 vs yesterdayNOW3,326 curated domains not answering-6,392 vs yesterdayERRORS10,949 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,994 material changesacross 2,717 domains · -404 vs yesterdayDNS DRIFT19 domains changed DNS providertop destination cloudflare.com · -8 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.comCERT DRIFT6 domains switched issuing CA24h · -1 vs yesterdayNOW3,326 curated domains not answering-6,392 vs yesterdayERRORS10,949 responded with an errorlast probe · 5xx / 404 / 429 / 403

worten.pt

Observed 2026-07-13T04:26:43.677Z (15h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Also usesAtlassianMiroGoogle Search Console
4 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat worten.pt actually stands on - every host below is a signed observation
worten.pt
A / AAAA
172.66.169.33104.20.19.234
Cloudflareserves the site
NS
todd.ns.cloudflare.comzita.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
worten-pt.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.worten.pt/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time741 ms
DNS resolutionNOERROR
Redirect chain
https://www.worten.pt/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 172.66.169.33
  • 104.20.19.234

MX 1

  • 0worten-pt.mail.protection.outlook.com

TXT 23

  • v=spf1 include:amazonses.com include:_spf.out.byside.com ip4:208.185.229.0/24 ip4:208.185.235.0/24 ip4:148.59.108.0/23 ip4:148.59.106.0/23 include:spf.mandrillapp.com include:spf.protection.outlook.com include:_spf.salesforce.com -all
  • 39f043ad-0fd7-4b13-b380-5caf04082f63
  • anthropic-domain-verification-dwrjf3=5wyPjIpyZVo47W3fe3Frb4sDg
  • atlassian-domain-verification=3TKur5x+StHjFagV-jlZRoxJjtWQ/pWKsFygHUEpLuy8PJJdaRgrx8jO/EXIW72B
  • mk-org-sso-ba46a15b-bbdd-4251-a19a-8236fdd3d22e
  • apple-domain-verification=WmPdf5hrYVSPf74D
  • miro-verification=32d612d74fa4d6408e6db278e447d170fd2f3f88
  • MS=ms11180237
  • teamviewer-sso-verification=10b8ed76cf864dd0af75c81a2d1070fe
  • df2002a2-bee9-4dae-a7d5-a44d55d83725

NS 2

  • todd.ns.cloudflare.com
  • zita.ns.cloudflare.com

SOA 1

  • todd.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for worten.pt. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for worten.pt <a href="https://domaindrift.io/t/worten.pt"> <img src="https://domaindrift.io/badge/worten.pt.svg" width="300" height="64" alt="DomainDrift signed observations for worten.pt"> </a>

Ed25519 Receipt

Receipt ID
0cec356a-be34-492c-8970-632c93d1a92a
Output Hash
3338c95d0a39a28b59f3eae56f23a5071ec5e4b0e5fbbf2780f5e86dbc5e8a56
Signature
ed25519:182f407878a52edef85c8b9320500ab92cc079672bd83e52e38e373fea07fb8643c76e6db1bb9432276b7a3efa1cac186bb290d6c72ac09610ee608095a74507
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser