CONTINUOUS INTERNET TELEMETRY24H DRIFT1,881 material changesacross 1,700 domains · -78 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination parity.domains · +2 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · +2 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,453 curated domains not answeringlast probe, steadyERRORS8,549 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,318 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,881 material changesacross 1,700 domains · -78 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination parity.domains · +2 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · +2 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,453 curated domains not answeringlast probe, steadyERRORS8,549 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,318 throttled or blocked our scanner429 rate-limit / 403 bot-block

zdf.de

Observed 2026-07-14T04:24:04.881Z (23h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesFacebook/MetaZoomMiroGoogle Search Console
14 subdomains · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat zdf.de actually stands on - every host below is a signed observation
zdf.de
A / AAAA
91.197.29.78
Cloudflareserves the site
NS
a22-67.akam.neta1-107.akam.neta14-66.akam.neta10-64.akam.net+4 more
akam.net + zdf.deanswers its DNS
MX
mail.zdf.de
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.zdf.de/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time1052 ms
DNS resolutionNOERROR
Redirect chain
https://www.zdf.de/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 91.197.29.78

MX 1

  • 15mail.zdf.de

TXT 13

  • PpqfBkv+dNIvCFJd0nfjMUbz3VsCR9SPUxxjKGuEAtR1e7LaxStzU5+T/RpgnH3OdqEYJQqmcV3DiEDSesw8Hw==
  • facebook-domain-verification=hb6wb986e73ua5fwxn6t9zfqjq9olp
  • ZOOM_verify_Wllf7UjIfNGKc1zFRX8GZ6
  • teamviewer-sso-verification=0a46b98a110a4950a4773ead0ebca2bb
  • _2ocfue7miy9iq62raa7ci5vj6r3i0xa
  • v=spf1 include:spf1.zdf.de include:spf.protection.outlook.com include:spf.nl2go.com include:spf.mailjet.com include:spf-005ffa01.pphosted.com -all
  • miro-verification=7d15c328d1c85b596fe22b6e31bb66591b1752c3
  • google-site-verification=MOFvgZPijgADlwMs-EP7lm6BTgGVRhkbX5t8BdG61nQ
  • apple-domain-verification=lVOPviAnVo9tQfOE
  • MS=ms99553264

NS 8

  • a22-67.akam.net
  • a1-107.akam.net
  • a14-66.akam.net
  • a10-64.akam.net
  • a11-65.akam.net
  • a9-66.akam.net
  • ns01.zdf.de
  • ns02.zdf.de

SOA 1

  • ns01.zdf.de netzwerk.zdf.de

TLS Certificates (0)

None.

Subdomains (14)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for zdf.de. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for zdf.de <a href="https://domaindrift.io/t/zdf.de"> <img src="https://domaindrift.io/badge/zdf.de.svg" width="300" height="64" alt="DomainDrift signed observations for zdf.de"> </a>

Ed25519 Receipt

Receipt ID
16d59041-828c-4a74-97aa-78247860547a
Output Hash
b17fecb8649354ec498a085a3cd2700548e35ddf07fa3b5071cce927bf8fb04f
Signature
ed25519:39edd5aa2cb8cc3dc21f3f8c26ff814db6031bdc78a77a2bb30d7b8dcbf310b94ddf4280d9ef533d52bab635850417a56e91c4cabf778213df6fae65f66a5d02
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser