CONTINUOUS INTERNET TELEMETRY24H DRIFT219 material changesacross 144 domains · +73 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,691 curated domains not answering+357 vs yesterdayERRORS30,432 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,598 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT219 material changesacross 144 domains · +73 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,691 curated domains not answering+357 vs yesterdayERRORS30,432 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,598 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

man.com

Observed Jul 18, 2026, 12:12 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Runs onAmazon
Email byMicrosoft 365
Registered withMarkMonitor Inc.
Also usesZoomAtlassianGoogle Search Console
IPv6 · automotive
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat man.com actually stands on - every host below is a signed observation
man.com
A / AAAA
100.28.104.17554.157.108.15898.83.184.1332600:1f18:297:ba24:b508:76de:f4a:df34+2 more
Amazonserves the site
NS
dns1.p02.nsone.netdns2.p02.nsone.netdns3.p02.nsone.netdns4.p02.nsone.net
nsone.netanswers its DNS
MX
man-com.mail.protection.outlook.com
Microsoft 365receives its email

DNS Records

A 3

  • 100.28.104.175
  • 54.157.108.158
  • 98.83.184.133

AAAA 3

  • 2600:1f18:297:ba24:b508:76de:f4a:df34
  • 2600:1f18:297:ba18:6ddc:5d8f:6053:f003
  • 2600:1f18:297:ba0e:7900:f622:48a8:f266

MX 1

  • 0man-com.mail.protection.outlook.com

TXT 28

  • apple-domain-verification=QqWboJ3E4D08YF1D
  • O+U+jtjItPmIl1AVJS6Ks67ddd8Mj+leLuphZsBTA9ilB61PSCVdVjhgJ5UZNyJuc+QnRh4O9HjmKzXTqPFPdQ==
  • MS=ms25357443
  • v=spf1 ip4:80.70.54.45/32 ip4:80.70.52.45/32 ip4:167.89.110.61/32 ip4:168.245.1.15/32 include:aspmx.pardot.com include:spf.protection.outlook.com include:mail.zendesk.com include:_spf.psm.knowbe4.com include:_spf.salesforce.com include:us._netblocks.mimecast.com -all
  • pardot_361981=a72a0a4079c9ba4028304fdd08f19b8816740d1c33fdcc31ee02b4dd190b1a9e
  • DDZNfe+cJYa2ms1ci3fTK4fn9vF2g89HSBOoWfMioBAtt1OAvux+HcLK9jnayMQrUIrGTmdJA3KbmoeF260sqg==
  • 672463719-44443891
  • pardot361981=0b362387162fb45ff55989bd6983b8279546ac8a84bc8af14ecc72f7c0e5b9c9
  • adobe-sign-verification=ff7a19ee96fada8fd7a28e8b10238b98
  • ZOOM_verify_S7XXARasS3W3qDPk4YjitQ

NS 4

  • dns1.p02.nsone.net
  • dns2.p02.nsone.net
  • dns3.p02.nsone.net
  • dns4.p02.nsone.net

SOA 1

  • dns1.p02.nsone.net hostmaster.nsone.net

SRV 4

  • eu-uct-12.man.com:5060 p10
  • eu-uct-11.man.com:5060 p10
  • eu-uct-11.man.com:5061 p10
  • eu-uct-12.man.com:5061 p10

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for man.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for man.com <a href="https://domaindrift.io/t/man.com"> <img src="https://domaindrift.io/badge/man.com.svg" width="300" height="64" alt="DomainDrift signed observations for man.com"> </a>

Ed25519 Receipt

Receipt ID
4bb52f4f-95c5-4ff0-8f61-f07647fa36d0
Output Hash
ee8968acdb9f4ebdc115d2bcd0a7895e5604b35b7753f81b726a4a626bfb327b
Signature
ed25519:b3d881542e18722900e0cf211429cb93eb199ca3776f548b15e0b11af164578fa301563f2274254ecacd762064d7c705dfa9072e8fe430ea23d2975cbe29790b
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser