CONTINUOUS INTERNET TELEMETRY24H DRIFT1,425 material changesacross 1,230 domains · +971 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination parity.domains · +17 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW584 curated domains not answering-1,631 vs yesterdayERRORS2,937 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,930 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,425 material changesacross 1,230 domains · +971 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination parity.domains · +17 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW584 curated domains not answering-1,631 vs yesterdayERRORS2,937 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,930 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

xtom.de

Observed 2026-07-17T15:37:35.892482893+00:00 (8h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Secured byLet's Encrypt
Also usesGoogle Search ConsoleStripe
IPv6 · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat xtom.de actually stands on - every host below is a signed observation
xtom.de
A / AAAA
185.255.55.52a09:0:2::5
Cloudflareserves the site
NS
ns1.xtom.comns2.xtom.comns3.xtom.comns4.xtom.com
xtom.comanswers its DNS
MX
ASPMX.L.GOOGLE.COMALT1.ASPMX.L.GOOGLE.COMALT2.ASPMX.L.GOOGLE.COMALT3.ASPMX.L.GOOGLE.COM+1 more
Google Workspacereceives its email
TLS
xtom.eu
Let's Encryptissued its certificate

DNS Records

A 1

  • 185.255.55.5

AAAA 1

  • 2a09:0:2::5

MX 5

  • 1ASPMX.L.GOOGLE.COM
  • 5ALT1.ASPMX.L.GOOGLE.COM
  • 5ALT2.ASPMX.L.GOOGLE.COM
  • 10ALT3.ASPMX.L.GOOGLE.COM
  • 10ALT4.ASPMX.L.GOOGLE.COM

TXT 7

  • ca3-1c55a3ed334448ed86939eef49d32e35
  • ca3-86c70da9b3314b25955a1621398509ef
  • v=spf1 include:_spf.google.com include:spf.mtasv.net ~all
  • google-site-verification=iuf8RL0IRRtDVMJkp0R58XDodlDC5_C_UnHXzdWFBJk
  • google-site-verification=tROcncXAD13KSUCnqdLd_6zJwioi1RqjTUHkpodHtTM
  • stripe-verification=29f62b97e6f67a0997568cad700b1813419660e76d899af5aebd008cb5db63c1
  • v=DMARC1; p=reject;rua=mailto:postmaster@xtom.com

NS 4

  • ns1.xtom.com
  • ns2.xtom.com
  • ns3.xtom.com
  • ns4.xtom.com

SOA 1

  • ns1.xtom.com hello.xtom.com

CAA 8

  • iodef "mailto:postmaster@xtom.de"
  • issue "buypass.com"
  • issue "buypass.no"
  • issue "digicert.com"
  • issue "globalsign.com"
  • issue "letsencrypt.org"
  • issue "pki.goog"
  • issue "sectigo.com"

TLS Certificates (3)

Common NameIssuerExpires
xtom.eu C=US, O=Let's Encrypt, CN=YR1 Wed, 26 Aug 2026 23:37:46 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for xtom.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for xtom.de <a href="https://domaindrift.io/t/xtom.de"> <img src="https://domaindrift.io/badge/xtom.de.svg" width="300" height="64" alt="DomainDrift signed observations for xtom.de"> </a>

Ed25519 Receipt

Receipt ID
aa05527f-a70c-42a1-b7a4-eccd09cfbece
Output Hash
190579382b7cce5edb9d855227014f9025512932b810ba28f468f0b07825129b
Signature
ed25519:137f099f1d157c67b2cd790592f2b529cd6930d3d261ec0ce34ed3575d0adefe35104226371735c9c76412bb6b0c7fc7d0c6e566423909e3ba659aca3ad54008
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser