CONTINUOUS INTERNET TELEMETRY24H DRIFT68,088 material changesacross 64,935 domains · 24h to ~3h ago · +33,471 vs yesterdayROTATION56 domains moved DNS from magpiedns.com to koaladns.com, 56 moved backa rotation loop, not a migration · 24hNOW538 curated domains not reachablelast probe, steadySITE ERRORS33,857 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 123,111 sites429 rate-limit / 403 bot-block, a posture signal

th-koeln.de

Observed Aug 3, 2026, 01:38 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of th-koeln.de was taken 3d ago

th-koeln.de is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting th-koeln.de under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch th-koeln.de Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Up right now
Secured byHellenic Academic and Research Institutions CA
Also usesZoomGoogle Search Console
1 subdomain · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat th-koeln.de actually stands on - every host below is a signed observation
th-koeln.de
A / AAAA
139.6.10.199
unattributedserves the site
NS
ns-iwz.nz.fh-koeln.dens-gwz.nz.fh-koeln.dedns1.uni-koeln.dedns-1.dfn.de
fh-koeln.de + uni-koeln.de + moreanswers its DNS
MX
smtp.intranet.fh-koeln.de
fh-koeln.dereceives its email
TLS
th-koeln.de
Hellenic Academic and Research Institutions CAissued its certificate

DNS Records

A 1

  • 139.6.10.199

MX 1

  • 10smtp.intranet.fh-koeln.de

TXT 5

  • adobe-idp-site-verification=e84fc53907db573f415999faeba0b054a0cf1be46c1b58bfd4d6eec650e306b9
  • ZOOM_verify_H2KL-OQNQ66T-iTJdqSdNQ
  • google-site-verification=hmfXc1YzEhLwHbW1cZznK-4xyrQ6-Uc7MjbCwCEGjzM
  • spycloud-domain-verification=85913570-860d-40b3-b6a2-780e843dabdd
  • v=spf1 include:spf.dynect.net include:spf.cluster4.4hr.de include:spf.nl2go.com +ip4:139.6.1.61 +ip4:139.6.1.47 +ip4:139.6.1.48 +ip4:139.6.1.49 +ip4:139.6.1.50 ?ip4:139.6.0.0/16 ~all

NS 4

  • ns-iwz.nz.fh-koeln.de
  • ns-gwz.nz.fh-koeln.de
  • dns1.uni-koeln.de
  • dns-1.dfn.de

SOA 1

  • ns-iwz.nz.fh-koeln.de dns.th-koeln.de

SRV 1

  • expressway-e-01.nz.fh-koeln.de:5061 p0

CAA 7

  • issue "harica.gr"
  • issue "letsencrypt.org"
  • issue "pki.dfn.de"
  • issue "pki.goog"
  • issue "sectigo.com"
  • issue "telesec.de"
  • iodef "mailto:dns@th-koeln.de"

DMARC_RECORDS 1

  • v=DMARC1;p=none;rua=mailto:dmarc-reports-bsn@campus-it.th-koeln.de

TLS Certificates (3)

Common NameIssuerExpires
th-koeln.de C=GR, O=Hellenic Academic and Research Institutions CA, CN=GEANT TLS RSA 1 Sat, 10 Oct 2026 10:46:54 +0000
GEANT TLS RSA 1 C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021 Sat, 31 Dec 2039 11:14:59 +0000
HARICA TLS RSA Root CA 2021 C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2015 Fri, 31 Aug 2029 07:41:54 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_17b7872a36bd008a
Output Hash
8244d73e4f5786f9e0ec91ef0b335cc63bef0581bfa6c367340e3cec5f3c4bf5
Signature
ed25519:99c01bc263a61e7709b1660a2ad05e3589db0238409c50b5d928b9c8dc45809abf87d9dac5fb49eb36340d54a2c27aad413caa15d8758c1425eac03dcd7f1901
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser