CONTINUOUS INTERNET TELEMETRY24H DRIFT6,644 material changesacross 6,482 domains · last 24h · -2,190 vs yesterdayDNS DRIFT185 domains changed DNS providertop destination cloudflare.com · -92 vs yesterdayEMAIL DRIFT46 domains switched email providertop destination outlook.com · -8 vs yesterdayCERT DRIFT63 domains switched issuing CA24h · -10 vs yesterdayNOW481 curated domains not reachable-76 vs yesterdaySITE ERRORS34,070 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 144,940 sites429 rate-limit / 403 bot-block, a posture signal

th-koeln.de

Observed Jul 27, 2026, 20:57 UTC (15h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Secured byHellenic Academic and Research Institutions CA
Also usesZoomGoogle Search Console
1 subdomain · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat th-koeln.de actually stands on - every host below is a signed observation
th-koeln.de
A / AAAA
139.6.10.199
unattributedserves the site
NS
ns-iwz.nz.fh-koeln.dens-gwz.nz.fh-koeln.dedns1.uni-koeln.dedns-1.dfn.de
fh-koeln.de + uni-koeln.de + moreanswers its DNS
MX
smtp.intranet.fh-koeln.de
fh-koeln.dereceives its email
TLS
th-koeln.de
Hellenic Academic and Research Institutions CAissued its certificate

DNS Records

A 1

  • 139.6.10.199

MX 1

  • 10smtp.intranet.fh-koeln.de

TXT 6

  • spycloud-domain-verification=85913570-860d-40b3-b6a2-780e843dabdd
  • v=spf1 include:spf.dynect.net include:spf.cluster4.4hr.de include:spf.nl2go.com +ip4:139.6.1.61 +ip4:139.6.1.47 +ip4:139.6.1.48 +ip4:139.6.1.49 +ip4:139.6.1.50 ?ip4:139.6.0.0/16 ~all
  • adobe-idp-site-verification=e84fc53907db573f415999faeba0b054a0cf1be46c1b58bfd4d6eec650e306b9
  • ZOOM_verify_H2KL-OQNQ66T-iTJdqSdNQ
  • google-site-verification=hmfXc1YzEhLwHbW1cZznK-4xyrQ6-Uc7MjbCwCEGjzM
  • v=DMARC1;p=none;rua=mailto:dmarc-reports-bsn@campus-it.th-koeln.de

NS 4

  • ns-iwz.nz.fh-koeln.de
  • ns-gwz.nz.fh-koeln.de
  • dns1.uni-koeln.de
  • dns-1.dfn.de

SOA 1

  • ns-iwz.nz.fh-koeln.de dns.th-koeln.de

SRV 1

  • expressway-e-01.nz.fh-koeln.de:5061 p0

CAA 6

  • issue "letsencrypt.org"
  • issue "sectigo.com"
  • issue "telesec.de"
  • iodef "mailto:dns@th-koeln.de"
  • issue "pki.dfn.de"
  • issue "harica.gr"

TLS Certificates (3)

Common NameIssuerExpires
th-koeln.de C=GR, O=Hellenic Academic and Research Institutions CA, CN=GEANT TLS RSA 1 Sat, 10 Oct 2026 10:46:54 +0000
GEANT TLS RSA 1 C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021 Sat, 31 Dec 2039 11:14:59 +0000
HARICA TLS RSA Root CA 2021 C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2015 Fri, 31 Aug 2029 07:41:54 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for th-koeln.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for th-koeln.de <a href="https://domaindrift.io/t/th-koeln.de"> <img src="https://domaindrift.io/badge/th-koeln.de.svg" width="300" height="64" alt="DomainDrift signed observations for th-koeln.de"> </a>

Ed25519 Receipt

Receipt ID
rcpt_5337499c07f1a994
Output Hash
e329d45fb81c8ba86e7058c023b4a8495df1e351059dc49983a469e6e4ef1c54
Signature
ed25519:3e22363a13b8744d833baa800612354eaf127c18f2914acfd694590480356fa95cd6587f1f482d6dfb8dfd083cfdbdff99f9e9db9f4dc1762a9c9330138cf409
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser