CONTINUOUS INTERNET TELEMETRY24H DRIFT48,244 material changesacross 46,548 domains · 24h to ~5h ago · +13,627 vs yesterdaySHIFT101 domains moved DNS from koaladns.com to magpiedns.coma coordinated move · 24hNOW534 curated domains not reachablelast probe, steadySITE ERRORS33,821 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 135,269 sites429 rate-limit / 403 bot-block, a posture signal

kfw.de

Observed Aug 3, 2026, 01:07 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of kfw.de was taken 3d ago

kfw.de is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting kfw.de under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch kfw.de Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Verify this receipt yourself + Watch this domain
Up right now
Runs on1&1 Versatel
Secured byDeutsche Telekom Security GmbH
Also usesGoogle Search Console
tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat kfw.de actually stands on - every host below is a signed observation
kfw.de
A / AAAA
104.151.29.97
1&1 Versatelserves the site
NS
c.ns14.netb.ns14.neta.ns14.netd.ns14.net
ns14.netanswers its DNS
MX
mx10.kfw.demx20.kfw.de
kfw.dereceives its email
TLS
*.kfw.de
Deutsche Telekom Security GmbHissued its certificate

DNS Records

A 1

  • 104.151.29.97

MX 2

  • 10mx10.kfw.de
  • 20mx20.kfw.de

TXT 5

  • google-site-verification=ZBj4d0Xkl0mITGCDrcIZcvhQbiUmUpzUPMuZAQv4hAk
  • v=spf1 mx -all
  • infoblox-domain-mastery=b8b91e23187d78cd262f1024517ef0315cd666d4ec6f99341028d020244082ad4c
  • apple-domain-verification=w7wMItdptkF2a3bG
  • ACFC7D8AF98CB16A994242FDE48A295A67A9EE5C7BD6E369693900C4AAF170EF

NS 4

  • c.ns14.net
  • b.ns14.net
  • a.ns14.net
  • d.ns14.net

SOA 1

  • a.ns14.net domadm.1und1.net

CAA 1

  • issue "telesec.de"

DMARC_RECORDS 1

  • v=DMARC1; p=reject; rua=mailto:dmarcreport@kfw.de

TLS Certificates (3)

Common NameIssuerExpires
*.kfw.de C=DE, O=Deutsche Telekom Security GmbH, CN=Telekom Security ServerID OV Class 2 CA Sat, 26 Sep 2026 23:59:59 +0000
Telekom Security ServerID OV Class 2 CA C=DE, O=T-Systems Enterprise Services GmbH, 2.5.4.11=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2 Mon, 02 Aug 2027 23:59:59 +0000
T-TeleSec GlobalRoot Class 2 C=DE, O=T-Systems Enterprise Services GmbH, 2.5.4.11=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2 Sat, 01 Oct 2033 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_2f1deed27e61c538
Output Hash
2dc7142fe5a87af5e1b134eb5a17759c70c2484acddc2fe337e9aaeb9097a665
Signature
ed25519:197155dc4543b571098abb5d257a4f4d4d6fedf3a6256cda360df64b4ef07b1ce4a3405c401aab70d34afc343ae4742aef2e05c96cf295775c465392f5aea905
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser