CONTINUOUS INTERNET TELEMETRY24H DRIFT10,475 material changesacross 10,085 domains · last 24h · -154 vs yesterdayDNS DRIFT662 domains changed DNS providertop destination cloudflare.com · -118 vs yesterdayEMAIL DRIFT177 domains switched email providertop destination google.com · +7 vs yesterdayCERT DRIFT226 domains switched issuing CA24h · -4 vs yesterdayNOW708 curated domains not reachable-641 vs yesterdaySITE ERRORS18,095 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED96,688 throttled or blocked our scanner429 rate-limit / 403 bot-block

grohe.com

Observed Jul 21, 2026, 19:26 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onGoogle
Email byGoogle Workspace
Secured bySectigo
Registered withCOREhub, S.R.L.
Also usesDocuSignMiroFacebook/MetaGoogle Search Console
construction
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat grohe.com actually stands on - every host below is a signed observation
grohe.com
A / AAAA
34.111.192.147
Googleserves the site
NS
ns3.lemarit.dens1.lemarit.dens1.lemarit.netns2.lemarit.de+1 more
lemarit.de + lemarit.netanswers its DNS
MX
aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
*.grohe.com
Sectigo Limitedissued its certificate

DNS Records

A 1

  • 34.111.192.147

MX 5

  • 1aspmx.l.google.com
  • 5alt2.aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com

TXT 14

  • docusign=3b99eba4-6986-4582-9c74-f8603b4bf113
  • WSpu/H6D8U/jrcjDQvH2CGXUUI2VdngUjUesulMyrUa7RuP69BeGzy8jV2ZoyOppLXo8wFPTI/VduXFButscrQ==
  • miro-verification=5234c9e1e618411afc292d7d57cfee32f3d16e7d
  • MS=ms56341533
  • jhKGBHd1zPAYzh3ehDyk3nTznIW09KDqYaYLyGHS4p0aWmBZurY7zn61AKFyNxvEqnQ5WvSp2ZpxOOWy+0ISyQ==
  • apple-domain-verification=QOrSpNcsGp0Hfeun
  • adobe-idp-site-verification=c1f2b664a9ba524f4846bb507cd1b13add3dee04f3861bda1734e0d169c3755c
  • facebook-domain-verification=q9wpwbbymrp7sgb06o429zrrcf6poy
  • MS=ms99458227
  • google-site-verification=dgrsO87gvenwzEdwBG8k-w3oRQ1FuTZPdyxmnxwlJVI

NS 5

  • ns3.lemarit.de
  • ns1.lemarit.de
  • ns1.lemarit.net
  • ns2.lemarit.de
  • ns2.lemarit.net

SOA 1

  • ns1.lemarit.de hostmaster.lemarit.com

TLS Certificates (3)

Common NameIssuerExpires
*.grohe.com C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 Mon, 19 Oct 2026 23:59:59 +0000
Sectigo Public Server Authentication CA DV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for grohe.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for grohe.com <a href="https://domaindrift.io/t/grohe.com"> <img src="https://domaindrift.io/badge/grohe.com.svg" width="300" height="64" alt="DomainDrift signed observations for grohe.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_ef9ee96568baf2ad
Output Hash
47512d9e1432a551a571377c399e942cf1512e93a2473668a8e7e40a790b1978
Signature
ed25519:53e326ab4ae93e23ef695c0f722970a0c5e2ef8ed6d9455c2ae19fb21bdc94ffd44285ddeb3819636fca9ef8aa18ed7e213944b813e92089ac6a44f3486f2700
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser