CONTINUOUS INTERNET TELEMETRY24H DRIFT66,120 material changesacross 63,653 domains · 24h to ~4h ago · +31,503 vs yesterdayROTATION56 domains moved DNS from koaladns.com to magpiedns.com, 56 moved backa rotation loop, not a migration · 24hNOW536 curated domains not reachablelast probe, steadySITE ERRORS33,825 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 121,690 sites429 rate-limit / 403 bot-block, a posture signal

dshs-koeln.de

Observed Aug 3, 2026, 03:29 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of dshs-koeln.de was taken 3d ago

dshs-koeln.de is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting dshs-koeln.de under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch dshs-koeln.de Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Up right now
Secured byHellenic Academic and Research Institutions CA
Also usesGoogle Search Console
2 subdomains · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat dshs-koeln.de actually stands on - every host below is a signed observation
dshs-koeln.de
A / AAAA
194.213.2.187
unattributedserves the site
NS
dns5.netcologne.dedns3.netcologne.dedns4.netcologne.de
netcologne.deanswers its DNS
MX
mx2.dshs-koeln.demx1.dshs-koeln.de
dshs-koeln.dereceives its email
TLS
www.dshs-koeln.de
Hellenic Academic and Research Institutions CAissued its certificate

DNS Records

A 1

  • 194.213.2.187

MX 2

  • 20mx2.dshs-koeln.de
  • 10mx1.dshs-koeln.de

TXT 8

  • have-i-been-pwned-verification=dweb_cl1h0xzfelcg8aqp4lgbi6nc
  • apple-domain-verification=w2j3ZRoCVnSvJwyg
  • google-site-verification=FlxcVE3fu_mqbNC3Pm0_Bze-HePItb4pV0I0hIx38_E
  • cisco-ci-domain-verification=4564177ada8139ec930dea2cd02f60385caaf8da9528f81c900fe03ae424260a
  • v=spf1 ip4:194.213.2.171 ip4:194.213.2.172 a:mx1.dshs-koeln.de a:mx2.dshs-koeln.de -all
  • sophos-domain-verification=d00a8fa985ff3ebe4e99eaf5f982db28c3bd0ff4161052202e072e0c576c60b2
  • spycloud-domain-verification=b88aae32-3879-460f-af29-db4c404decca
  • duo_sso_verification=fg23mOX5iKTotj8I4GCNVMe1kwSUDBF6woC4JeU0szM98GxK7bD0rjbJL7onIAej

NS 3

  • dns5.netcologne.de
  • dns3.netcologne.de
  • dns4.netcologne.de

SOA 1

  • dns3.netcologne.de response.dshs-koeln.de

DMARC_RECORDS 1

  • v=DMARC1; p=none; rua=mailto:watchdog2@watchdog.kevlarr.io;

TLS Certificates (3)

Common NameIssuerExpires
www.dshs-koeln.de C=GR, O=Hellenic Academic and Research Institutions CA, CN=GEANT TLS RSA 1 Sun, 07 Feb 2027 05:26:39 +0000
GEANT TLS RSA 1 C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021 Sat, 31 Dec 2039 11:14:59 +0000
HARICA TLS RSA Root CA 2021 C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2015 Fri, 31 Aug 2029 07:41:54 +0000

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_817ffee816f71cb8
Output Hash
488e560a276c14d01fc2847edf86661a20b688a26b41550b74ba30e4af8fdda0
Signature
ed25519:67c7766bb3a54f79dc307d968a609d25fedb53975cb400cc34f3ef23789b2c488f677a166e99d734e70f69e5d827d96491250fbc335123e4ba93dc074ee92c01
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser