CONTINUOUS INTERNET TELEMETRY24H DRIFT226 material changesacross 35 domains · last 24h · +66 vs yesterday

rubicon-koeln.de

Observed Jul 28, 2026, 09:48 UTC (20h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Up right now
Secured byLet's Encrypt
majestic
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rubicon-koeln.de actually stands on - every host below is a signed observation
rubicon-koeln.de
A / AAAA
85.13.156.129
unattributedserves the site
NS
ns6.kasserver.comns5.kasserver.com
kasserver.comanswers its DNS
MX
mx04.hornetsecurity.commx03.hornetsecurity.commx01.hornetsecurity.commx02.hornetsecurity.com
hornetsecurity.comreceives its email
TLS
rubicon-koeln.de
Let's Encryptissued its certificate

DNS Records

A 1

  • 85.13.156.129

MX 4

  • 40mx04.hornetsecurity.com
  • 30mx03.hornetsecurity.com
  • 10mx01.hornetsecurity.com
  • 20mx02.hornetsecurity.com

TXT 3

  • MS=ms12518467
  • v=spf1 include:spf.protection.outlook.com -all
  • v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@4nes.com; ruf=mailto:dmarc@4nes.com; fo=1

NS 2

  • ns6.kasserver.com
  • ns5.kasserver.com

SOA 1

  • ns5.kasserver.com hostmaster.kasserver.com

TLS Certificates (4)

Common NameIssuerExpires
rubicon-koeln.de C=US, O=Let's Encrypt, CN=YE2 Tue, 08 Sep 2026 07:55:21 +0000
YE2 C=US, O=ISRG, CN=Root YE Sat, 02 Sep 2028 23:59:59 +0000
Root YE C=US, O=Internet Security Research Group, CN=ISRG Root X2 Thu, 02 Sep 2032 23:59:59 +0000
ISRG Root X2 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for rubicon-koeln.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for rubicon-koeln.de <a href="https://domaindrift.io/t/rubicon-koeln.de"> <img src="https://domaindrift.io/badge/rubicon-koeln.de.svg" width="300" height="64" alt="DomainDrift signed observations for rubicon-koeln.de"> </a>

Ed25519 Receipt

Receipt ID
rcpt_69c8a722e52df2a7
Output Hash
f410127d6f29b74040f3a71d01779056dc2ce151983d44afbd2fe23cf32e7707
Signature
ed25519:2b1cc16517511a372e3b28046052a27d32a334265e2e7c03eea239865aef085f3c75cfe29dc62e25cf8ff096b3824ba50b0f278f68d827df7de67f19442bda01
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser