CONTINUOUS INTERNET TELEMETRY24H3,381 material changesacross 2,917 domains · -466 vs yesterdayMOVES27 domains changed DNS providertop destination brainydns.com · -11 vs yesterdayMOVES6 domains switched email providertop destination 365cool.com · -3 vs yesterdayTLS7 domains switched issuing CA24h · -3 vs yesterdayNOW9,719 curated domains not answeringlast probe, steady24H3,381 material changesacross 2,917 domains · -466 vs yesterdayMOVES27 domains changed DNS providertop destination brainydns.com · -11 vs yesterdayMOVES6 domains switched email providertop destination 365cool.com · -3 vs yesterdayTLS7 domains switched issuing CA24h · -3 vs yesterdayNOW9,719 curated domains not answeringlast probe, steady

kohler.com

Observed 2026-07-12T18:31:22.936Z (5h ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Runs onCloudflare
Email byProofpoint
Registered withMarkMonitor Inc.
Also usesAtlassianZoomMiroGoogle Search ConsoleFacebook/Meta
19 subdomains · construction
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat kohler.com actually stands on - every host below is a signed observation
kohler.com
A / AAAA
23.67.33.4523.67.33.35
Cloudflareserves the site
NS
eur7.akam.netuse6.akam.netusw2.akam.netusw6.akam.net+4 more
akam.netanswers its DNS
MX
mxa-00174802.gslb.pphosted.commxb-00174802.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

server_error Server error (5xx) 520 Server Error
HTTP status520
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time68 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 23.67.33.45
  • 23.67.33.35

MX 2

  • 10mxa-00174802.gslb.pphosted.com
  • 10mxb-00174802.gslb.pphosted.com

TXT 30

  • uber-domain-verification=0737891a-bce7-4ccc-9b08-146f271753d8
  • atlassian-domain-verification=YEEtWh7fKODWi7QX+K4ZvuyySxlrxtVxiPIIoFKvd1wOQkNTOoc4UWKsCQqbvdmd
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • ZOOM_verify_JqfVLCgW87qb9947aQySF7
  • SFMC-lDph42N5oVG8z5DtLK5OujQyAj3QMwO_5p7AEykX
  • webexdomainverification.4C675B8BD55B136E053AB06FC0A3F65=440fa4e0-b028-47bb-8086-4d805286cd52
  • smartsheet-site-validation=_4v-PWM_l7-NirMOu8uyqj5WYNwto8cL
  • cisco-ci-domain-verification=6768f3da86759b535230444ede5be13639c9a7a5a0bf6afd9281480a5398b348
  • wiz-domain-verification=ce890c61d4a8c45b4c02169f2b631bd6f1bac641de4c5744c289442169168930
  • uber-domain-verification=fea18a1b-aa27-4af2-8670-44bf221a936a

NS 8

  • eur7.akam.net
  • use6.akam.net
  • usw2.akam.net
  • usw6.akam.net
  • ns1-116.akam.net
  • usw1.akam.net
  • use10.akam.net
  • ns1-223.akam.net

SOA 1

  • ns-west.cerf.net hostmaster.attens.com

TLS Certificates (0)

None.

Subdomains (19)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what Connor observes and signs for kohler.com. It updates itself. It attests a signed observation - not that the site is safe.

Connor signed-observation badge for kohler.com <a href="https://domaindrift.io/t/kohler.com"> <img src="https://domaindrift.io/badge/kohler.com.svg" width="300" height="64" alt="Connor signed observations for kohler.com"> </a>

Ed25519 Receipt

Receipt ID
a8ce5814-694e-4b96-952a-e64c42d6e582
Output Hash
43be5050f40ebc6c4644ceabba750b2ce8729dfd98a6a5c3accf6ca6f4716f29
Signature
ed25519:124fed95f1763dd4e6624f9ff0f1b932452c9939315c38864a3f8d2ff03c1e4e7433a708170ae5b5b4f888b38da5837bbf740b360694d0fe16b9fe14b7e74c00
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser