CONTINUOUS INTERNET TELEMETRY24H DRIFT2,825 material changesacross 2,510 domains · -573 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,327 curated domains not answering-6,391 vs yesterdayERRORS10,948 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,825 material changesacross 2,510 domains · -573 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,327 curated domains not answering-6,391 vs yesterdayERRORS10,948 responded with an errorlast probe · 5xx / 404 / 429 / 403

thalia.de

Observed 2026-07-12T22:13:49.114Z (17h ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall
Runs onCloudflare
Email byMimecast
Also usesGoogle Search ConsoleAtlassianDocuSignFacebook/MetaFigma
8 subdomains · tranco_10k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat thalia.de actually stands on - every host below is a signed observation
thalia.de
A / AAAA
104.17.102.118104.17.101.118
Cloudflareserves the site
NS
ken.ns.cloudflare.comsasha.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
de-smtp-inbound-2.mimecast.comde-smtp-inbound-1.mimecast.com
Mimecastreceives its email

HTTPS probe

bot_blocked Blocked our probe (WAF / bot protection) 403 blocked by cloudflare - bot protection active
HTTP status403
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time9 ms
DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 104.17.102.118
  • 104.17.101.118

MX 2

  • 10de-smtp-inbound-2.mimecast.com
  • 10de-smtp-inbound-1.mimecast.com

TXT 22

  • google-site-verification=kfVS-p12oafGf07NHG5arzyQ0Cy3hEYCvbobcz-uU3I
  • ca3-1fde5e38790a4d09bb7fcea155e7cb38
  • atlassian-sending-domain-verification=a49a0ae1-657b-428c-a4ef-baff6efbe16b
  • atlassian-domain-verification=SmpfzrCpzqa0csakddk/hYaoUpyE0OaCA6BT03tM5O0i0ExZdhJ3EN8T9Y9ioNmg
  • google-site-verification=HAZL4JUGRjFkEcRkbcLImVQLI82QCPChk4PPqBXZNQQ
  • jamf-site-verification=7lcts859LBr9QWSx4UjEPQ
  • ahrefs-site-verification_8e4e99277047ebda98853d21cc5f074ac025793ad371ab76b02b0f81f4de84f6
  • google-site-verification=EP88afint3kJe6GzwK4ccdZvas5F_MoTDdis4QMPNk0
  • v=spf1 include:de._netblocks.mimecast.com include:_spf.zimpel.de ip4:195.191.69.25/23 mx ip4:212.101.205.0/25 ip4:84.19.163.97/32 ip4:213.133.111.214 ip4:83.169.4.100/32 ip4:149.202.140.65 ip4:212.101.203.180 ip4:31.24.144.105 ip4:217.7.26.227 ip4:45.132.71.158 ip4:80.156.235.162 -all
  • MS=ms62699720

NS 2

  • ken.ns.cloudflare.com
  • sasha.ns.cloudflare.com

SOA 1

  • ken.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for thalia.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for thalia.de <a href="https://domaindrift.io/t/thalia.de"> <img src="https://domaindrift.io/badge/thalia.de.svg" width="300" height="64" alt="DomainDrift signed observations for thalia.de"> </a>

Ed25519 Receipt

Receipt ID
2e0cc083-feb9-4230-842c-c0b1a42c4bc9
Output Hash
5b9d0ba90da405da6d2f15b27afb2f18ab2afdc37e479d19aca94ff70f959456
Signature
ed25519:e8f450be7aa50fa68f901e6df1a541d7e596e9b6c18debc82b70e0b237f8fb07e4bfab1ecfd6ec1dc094c84b80e5b2ca6ec39bca017f7320b7b3e9f8e7456509
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser