CONTINUOUS INTERNET TELEMETRY24H DRIFT506 material changesacross 451 domains · -152 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,059 curated domains not answering+230 vs yesterdayERRORS20,471 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED56,442 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT506 material changesacross 451 domains · -152 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,059 curated domains not answering+230 vs yesterdayERRORS20,471 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED56,442 throttled or blocked our scanner429 rate-limit / 403 bot-block

koeln.de

Observed Jul 19, 2026, 19:00 UTC (8h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
13 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat koeln.de actually stands on - every host below is a signed observation
koeln.de
A / AAAA
81.173.246.122
Cloudflareserves the site
NS
dns11.netcologne.dedns13.netcologne.dedns14.netcologne.dedns12.netcologne.de
netcologne.deanswers its DNS
MX
mailin.koeln.desecondary.snafu.de
koeln.de + snafu.dereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.koeln.de/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time521 ms
DNS resolutionNOERROR
Redirect chain
https://www.koeln.de/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 81.173.246.122

MX 2

  • 10mailin.koeln.de
  • 50secondary.snafu.de

TXT 2

  • v=spf1 include:_spf1.snafu.de include:_spf2.snafu.de include:netcologne.de ~all
  • MS=7FA3943A71F70FF079394B0F769D52A53679AC71

NS 4

  • dns11.netcologne.de
  • dns13.netcologne.de
  • dns14.netcologne.de
  • dns12.netcologne.de

SOA 1

  • dns11.netcologne.de hostmaster.routing.net

TLS Certificates (0)

None.

Subdomains (13)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for koeln.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for koeln.de <a href="https://domaindrift.io/t/koeln.de"> <img src="https://domaindrift.io/badge/koeln.de.svg" width="300" height="64" alt="DomainDrift signed observations for koeln.de"> </a>

Ed25519 Receipt

Receipt ID
76ba4975-fad3-4998-8549-381b193d1a16
Output Hash
2dba23c6e897bca0183a6c848368d129d1dd4884f4220d1f8b4a79f6268627c9
Signature
ed25519:1fb1f2f90caa846ddb8d771c67f38a6cc29b566d1cc0b1aab9da0935b138a5180762918608df8e14204a0e22e7aa5d8b2c8b289e3ecc74311b1810c089b7c400
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser