CONTINUOUS INTERNET TELEMETRY24H DRIFT187 material changesacross 148 domains · -471 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,868 curated domains not answering+1,039 vs yesterdayERRORS25,119 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED71,645 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT187 material changesacross 148 domains · -471 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,868 curated domains not answering+1,039 vs yesterdayERRORS25,119 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED71,645 throttled or blocked our scanner429 rate-limit / 403 bot-block

fansale.de

Observed Jul 18, 2026, 17:48 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Email byProofpoint
Also usesAtlassianGoogle Search Console
IPv6 · 2 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat fansale.de actually stands on - every host below is a signed observation
fansale.de
A / AAAA
104.68.102.1592600:1406:2e00:981::2ba52600:1406:2e00:989::2ba5
2600serves the site
NS
a10-65.akam.neta13-67.akam.neta1-222.akam.neta6-65.akam.net+2 more
akam.netanswers its DNS
MX
mxa-0072c901.gslb.pphosted.commxb-0072c901.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

timeout No response within the timeout Connection timed out - no response within 3s
HTTP status0
Servernot observed
TLS protocolnot observed
TLS issuernot observed
Behind Cloudflareno
Response time6200 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 104.68.102.159

AAAA 2

  • 2600:1406:2e00:981::2ba5
  • 2600:1406:2e00:989::2ba5

MX 2

  • 10mxa-0072c901.gslb.pphosted.com
  • 10mxb-0072c901.gslb.pphosted.com

TXT 5

  • MS=ms27143457
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • atlassian-domain-verification=sRxNCVi7vbQFvIQOy3yD5wRhIsBfb/nlTssiVfRTkqhr2bN35VWGJsPaLo/7hvER
  • google-site-verification=o7tbfy5nXz3kOun46q5OQAlYE3cKYCIw9flpudRcr5w
  • v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc@eventim.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com,mailto:dmarc@eventim.com; pct=100;

NS 6

  • a10-65.akam.net
  • a13-67.akam.net
  • a1-222.akam.net
  • a6-65.akam.net
  • a3-64.akam.net
  • a12-66.akam.net

SOA 1

  • ns.eventim.de dns.eventim.de

TLS Certificates (0)

None.

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for fansale.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for fansale.de <a href="https://domaindrift.io/t/fansale.de"> <img src="https://domaindrift.io/badge/fansale.de.svg" width="300" height="64" alt="DomainDrift signed observations for fansale.de"> </a>

Ed25519 Receipt

Receipt ID
93c31f1f-8634-405e-be05-17d08f436e45
Output Hash
9f85f6ca0cb3dd0d97b671cddc4671a7d83e6c664edc082111f4f98f3115e435
Signature
ed25519:e8454273c174e5fc022c6e7f0979911439e4ab1a4a053c48fb071011ba3f21461fa5f412d88dac99dead74c3d4d13fcc7d710fc7586f4d6d375a860ba95ff50a
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser