CONTINUOUS INTERNET TELEMETRY24H DRIFT1,042 material changesacross 857 domains · -1,036 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination kirklanddc.com · -13 vs yesterdayNOW2,572 curated domains not answering+1,446 vs yesterdayERRORS17,277 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED44,239 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,042 material changesacross 857 domains · -1,036 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination kirklanddc.com · -13 vs yesterdayNOW2,572 curated domains not answering+1,446 vs yesterdayERRORS17,277 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED44,239 throttled or blocked our scanner429 rate-limit / 403 bot-block

tf1.fr

Observed Jul 18, 2026, 12:50 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onAmazon
Email byProofpoint
Secured byGlobalSign
Registered withNAMESHIELD
Also usesStripeMiroGoogle Search ConsoleAtlassian
tranco_10k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat tf1.fr actually stands on - every host below is a signed observation
tf1.fr
A / AAAA
15.197.129.244
Amazonserves the site
NS
ns1.coltfrance.comnsa.perf1.frnsb.perf1.comnsc.perf1.com
coltfrance.com + perf1.fr + moreanswers its DNS
MX
mxa-004e7e01.gslb.pphosted.commxb-004e7e01.gslb.pphosted.com
Proofpointreceives its email
TLS
*.tf1.fr
GlobalSign nv-saissued its certificate

DNS Records

A 1

  • 15.197.129.244

MX 2

  • 5mxa-004e7e01.gslb.pphosted.com
  • 5mxb-004e7e01.gslb.pphosted.com

TXT 35

  • wIVLN0DAgswxZPZa5W/m7akdq9zLD1cszETEr1iyLAO1kzMHuXlsF+xwDJAvxi/dBfwmIxqBrFoAQ3vI8qMrew==
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • stripe-verification=a68b130c255ded7cb89f4aa86cd05b74910f0d17a1c99647fddbb4d66bb61a8d
  • stripe-verification=AB39C2D4B24CE0838BE4EB9B5C16A2741F181E7F67CE6783A7AA73968B939842
  • stripe-verification=949a7d8762693f04034d7c516b8ac47f3d7b30a4ce0b4c7962ecba23f666b899
  • stripe-verification=6b5636fc92c2ad778070c583c126a16169c9cbfad5eb2c8248f16ba89ab9aa0f
  • stripe-verification=541a5c5f4c8f1ae4d1da1cfe2394032e8414f2a95eb0d923283f3dbdaf7e8697
  • stripe-verification=24f853554629863ffc1aa084008764dc27aca81bdb82702337b81f2399f29198
  • storiesonboard-verification=B4A5356384754BD4B2552C9B745DA771
  • riot-domain-verification=109aa709345405a31d234f32084b830bd96ffd2e7a44659fef9398e6a679

NS 4

  • ns1.coltfrance.com
  • nsa.perf1.fr
  • nsb.perf1.com
  • nsc.perf1.com

SOA 1

  • nsa.perf1.fr dnsmaster.tf1.fr

SRV 2

  • access.tf1.fr:5269 p0
  • autodiscover-s.outlook.com:443 p0

TLS Certificates (2)

Common NameIssuerExpires
*.tf1.fr C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA OV SSL CA 2018 Tue, 23 Feb 2027 10:16:28 +0000
GlobalSign RSA OV SSL CA 2018 2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign Tue, 21 Nov 2028 00:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for tf1.fr. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for tf1.fr <a href="https://domaindrift.io/t/tf1.fr"> <img src="https://domaindrift.io/badge/tf1.fr.svg" width="300" height="64" alt="DomainDrift signed observations for tf1.fr"> </a>

Ed25519 Receipt

Receipt ID
2ddd55ec-50fe-4721-9c7f-60954e9c2163
Output Hash
f6120e6fdee231190c359cf56aaeb0690affffd4c76f95540b464b6c475245a7
Signature
ed25519:2192070a91fda8b934ac6785fe4746f1b79c2e161e8dc19f41868c8d4e3d942f5293fc12769242bfd61177fd2c1988f144dc4887762ff63be196dc119750fb0a
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser