CONTINUOUS INTERNET TELEMETRY24H DRIFT10,661 material changesacross 10,235 domains · +32 vs yesterdayDNS DRIFT761 domains changed DNS providertop destination parity.domains · -19 vs yesterdayEMAIL DRIFT193 domains switched email providertop destination cloudflare.net · +23 vs yesterdayCERT DRIFT218 domains switched issuing CA24h · -12 vs yesterdayNOW777 curated domains not reachable-572 vs yesterdaySITE ERRORS18,136 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED95,200 throttled or blocked our scanner429 rate-limit / 403 bot-block

nw.de

Observed Jul 22, 2026, 00:23 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onEnvia Tel
Email byMicrosoft 365
Secured bySectigo
Also usesGoogle Search ConsoleAtlassian
tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat nw.de actually stands on - every host below is a signed observation
nw.de
A / AAAA
77.235.162.173
Envia Telserves the site
NS
ns1.evolver.dens2.evolver.dens3.evolver.de
evolver.deanswers its DNS
MX
nw-de.mail.protection.outlook.com
Microsoft 365receives its email
TLS
*.nw.de
Sectigo Limitedissued its certificate

DNS Records

A 1

  • 77.235.162.173

MX 1

  • 10nw-de.mail.protection.outlook.com

TXT 8

  • knowbe4-site-verification=859edd8f9d987fb792d7079962a2fc88
  • TSduyE/JlZdxHnVydS1M95jKZoFxt4rPwxyx0G/Dbfz6KkSXRotTlMes121tQAVoNz1XsJr9piFIwGXIiaByGQ==
  • google-site-verification=RqVno3HdSkcsG_zf-9MXexfeGKYp5bhN30rpGHvDR7c
  • brevo-code:bae1b598b4722a542ee0172910138019
  • MS=ms14324778
  • v=spf1 mx ip4:212.8.208.0/24 ip4:212.8.209.192/29 ip4:212.8.197.4/32 ip4:212.8.197.5/32 ip4:212.8.197.13/32 ip4:212.8.197.105/32 ip4:212.8.197.106/32 ip4:212.8.197.107/32 ip4:212.8.197.109/32 ip4:188.94.250.251/32 ip4:188.94.250.245/32 ip4:185.227.112.237/32 ip4:185.15.192.203/32 ip4:195.140.184.0/22 ip4:91.192.40.0/22 ip4:199.244.72.0/24 ip4:199.244.74.22/32 ip4:213.157.3.185/32 ip4:185.39.220.181/32 ip4:199.187.173.251/32 include:spf.protection.outlook.com include:amazonses.com include:thinkowl.nw.de include:spf.fidion.de include:_spfi.evolver.de include:spf.teuto.net include:spf.gutenberg-rz.de -all
  • atlassian-domain-verification=P30ilyYxUti6uxXIgGcxDKBt8QpQT31iPoY3r3QGp/B66tQ2MXq/JmQAN/JH/LSK
  • v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

NS 3

  • ns1.evolver.de
  • ns2.evolver.de
  • ns3.evolver.de

SOA 1

  • ns1.evolver.de dnsadmin.evolver.de

TLS Certificates (3)

Common NameIssuerExpires
*.nw.de C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 Sun, 08 Nov 2026 23:59:59 +0000
Sectigo Public Server Authentication CA DV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nw.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for nw.de <a href="https://domaindrift.io/t/nw.de"> <img src="https://domaindrift.io/badge/nw.de.svg" width="300" height="64" alt="DomainDrift signed observations for nw.de"> </a>

Ed25519 Receipt

Receipt ID
rcpt_eb0adfd61d23df86
Output Hash
f577ed44fa3e869f333615a58c5ed5b985362e5bfa9df0f28d41938e78075587
Signature
ed25519:32a35136241ea9f37529b8fcd683b90172e5f4219a09aed950d7d84ad2e4affff16a3c855d4d8bda13cd98370bba1ab8ac487c8830dc981fe934ea79fb777202
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser