CONTINUOUS INTERNET TELEMETRY24H DRIFT7,933 material changesacross 7,625 domainsDNS DRIFT564 domains changed DNS providertop destination parity.domainsEMAIL DRIFT106 domains switched email providertop destination google.comCERT DRIFT178 domains switched issuing CA24hNOW1,641 curated domains not reachable-1,069 vs yesterdaySITE ERRORS20,646 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED93,261 throttled or blocked our scanner429 rate-limit / 403 bot-block

bsi.bund.de

Observed Jul 21, 2026, 19:35 UTC (20h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onITZBund
Secured byD-Trust GmbH
1 subdomain · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat bsi.bund.de actually stands on - every host below is a signed observation
bsi.bund.de
A / AAAA
80.245.144.218
ITZBundserves the site
MX
mx1.bund.demx2.bund.de
bund.dereceives its email
TLS
www.bsi.bund.de
D-Trust GmbHissued its certificate

DNS Records

A 1

  • 80.245.144.218

MX 2

  • 10mx1.bund.de
  • 10mx2.bund.de

TXT 4

  • v=spf1 include:_spf1.bund.de -all
  • apple-domain-verification=e47sn9INA83Ar3UT
  • apple-domain-verification=mc8uJaIgueM41k9h
  • v=DMARC1; p=reject;rua=mailto:bsi.bund.de@dmarc.reports.bund.de;

CAA 5

  • iodef "mailto:isb@bsi.bund.de"
  • issue "d-trust.de"
  • issue "letsencrypt.org"
  • issue "pki.dfn.de"
  • issuewild ""

TLS Certificates (3)

Common NameIssuerExpires
www.bsi.bund.de C=DE, O=D-Trust GmbH, CN=D-TRUST BR CA 2-23-1 2023 Sun, 18 Oct 2026 06:26:20 +0000
D-TRUST BR CA 2-23-1 2023 C=DE, O=D-Trust GmbH, CN=D-TRUST BR Root CA 2 2023 Sun, 09 May 2038 08:56:30 +0000
D-TRUST BR Root CA 2 2023 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009 Mon, 05 Nov 2029 08:35:58 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for bsi.bund.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for bsi.bund.de <a href="https://domaindrift.io/t/bsi.bund.de"> <img src="https://domaindrift.io/badge/bsi.bund.de.svg" width="300" height="64" alt="DomainDrift signed observations for bsi.bund.de"> </a>

Ed25519 Receipt

Receipt ID
rcpt_2c57e5a9331f8374
Output Hash
679d5091fec9a9f658b6d34243f71411541d39e6ed8dc71af5c75d4cb7f3924d
Signature
ed25519:3da5eb44e19cb38ba2c4e1b52e7827a8af58d9b16ced10d5a67a2b6ba12edf0492273bf16540a1cef6c016b85f1d3ce8ba73db4a9d122d69245ed3490d18a209
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser