CONTINUOUS INTERNET TELEMETRY24H DRIFT269 material changesacross 224 domains · -1,367 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination akam.net · -15 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -7 vs yesterdayNOW53,806 curated domains not answering+39,383 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT269 material changesacross 224 domains · -1,367 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination akam.net · -15 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -7 vs yesterdayNOW53,806 curated domains not answering+39,383 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block

yr.no

Observed 2026-07-15T10:44:47.212Z (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Registered withSIKT - KUNNSKAPSSEKTORENS TJENESTELEVERANDØR
Also usesGoogle Search ConsoleFacebook/Meta
IPv6 · 5 subdomains · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat yr.no actually stands on - every host below is a signed observation
yr.no
A / AAAA
96.16.55.13896.16.55.1322600:1406:2e00:b::6010:37842600:1406:2e00:b::6010:378a
Cloudflareserves the site
NS
a13-65.akam.neta26-67.akam.neta20-66.akam.neta1-251.akam.net+2 more
akam.netanswers its DNS
MX
alt1.aspmx.l.google.comalt4.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.yr.no/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time191 ms
DNS resolutionNOERROR
Redirect chain
https://www.yr.no/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 96.16.55.138
  • 96.16.55.132

AAAA 2

  • 2600:1406:2e00:b::6010:3784
  • 2600:1406:2e00:b::6010:378a

MX 5

  • 5alt1.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 1aspmx.l.google.com

TXT 7

  • google-site-verification=V25BK1yz5-skCXsUxSd3EIW8ZUcQHGPQZFYabTBhcss
  • v=spf1 include:_spf.google.com include:mail.zendesk.com -all
  • _190e4eyp13621tx1sxps2fgnac6n7pk
  • facebook-domain-verification=0733iqswbhzbgl5rtud6mpqi2usgrf
  • v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@met.no,mailto:dmarc@meteorologisk.uriports.com; ruf=mailto:dmarc-reports@met.no,mailto:dmarc@meteorologisk.uriports.com
  • v=DKIM1; (detected)
  • v=DNSSEC1; (detected)

NS 6

  • a13-65.akam.net
  • a26-67.akam.net
  • a20-66.akam.net
  • a1-251.akam.net
  • a7-64.akam.net
  • a10-64.akam.net

SOA 1

  • a1-251.akam.net hostmaster.nrk.no

TLS Certificates (0)

None.

Subdomains (5)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for yr.no. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for yr.no <a href="https://domaindrift.io/t/yr.no"> <img src="https://domaindrift.io/badge/yr.no.svg" width="300" height="64" alt="DomainDrift signed observations for yr.no"> </a>

Ed25519 Receipt

Receipt ID
dbec50c7-999e-4940-ab97-b0488d0557ee
Output Hash
604fe3c9b05c73b3a7d2ec7fd8f0b9b516d24492b51ba602ff101cb8444e96e0
Signature
ed25519:0bce86fc2f661989155a2d89f329496853c1797fa42837c7ce26514945fe8eb8d7e7245e09cc373e4652ec4cdeec3b68a58df9c2375979563216c16cda3e490b
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser