CONTINUOUS INTERNET TELEMETRY24H DRIFT160 material changesacross 113 domains · +14 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,390 curated domains not answeringlast probe, steadyERRORS28,557 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,476 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT160 material changesacross 113 domains · +14 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,390 curated domains not answeringlast probe, steadyERRORS28,557 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,476 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

ricardo.ch

Observed Jul 18, 2026, 13:08 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall
Runs onCloudflare
Email byGoogle Workspace
Secured byGoogle Trust Services
Also uses1PasswordZoomAtlassianDocuSignGoogle Search ConsoleMiroNotion
1 subdomain · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ricardo.ch actually stands on - every host below is a signed observation
ricardo.ch
A / AAAA
172.64.145.210104.18.42.46
Cloudflareserves the site
NS
aida.ns.cloudflare.comdean.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
ricardo.ch
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 172.64.145.210
  • 104.18.42.46

MX 5

  • 1aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 27

  • 1password-site-verification=JL3O37IJWNDV7AA4WEJSQSKPHQ
  • MS=682B67FA0C16883DF2ABD98DA8E8934E200F63A2
  • MS=ms10713536
  • MS=ms90765743
  • ZOOM_verify_rCgFOMfeunmrPg5p4siXUV
  • _cf-custom-hostname.login.ricardo.ch=a6a6d5b1-dcad-4ca4-939a-4064aec11eba
  • apple-domain-verification=zRgYDoS3GWj7xD2fVrk8abB9KnAr5Fge8YqmY7GMObI
  • atlassian-domain-verification=pLpU1UjKfZtTcf1u3WHuQ6EQ99a40maaPIcXZZg6g37XwFbnOC9wSGaBt/uQrr9O
  • docusign=105fd6f5-19fe-4651-8818-f5b413081122
  • google-site-verification=6FrmMY09QHiVArL2YA1O79klXUMZ29CIDAejrhHveFw

NS 2

  • aida.ns.cloudflare.com
  • dean.ns.cloudflare.com

SOA 1

  • aida.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common NameIssuerExpires
ricardo.ch C=US, O=Google Trust Services, CN=WE1 Mon, 12 Oct 2026 04:39:59 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ricardo.ch. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ricardo.ch <a href="https://domaindrift.io/t/ricardo.ch"> <img src="https://domaindrift.io/badge/ricardo.ch.svg" width="300" height="64" alt="DomainDrift signed observations for ricardo.ch"> </a>

Ed25519 Receipt

Receipt ID
920c4548-c422-4348-99fb-21f30f475e50
Output Hash
9ec302df4bb70fc078db61c2dc531cdc2551c16758109841ecbd71443e534d05
Signature
ed25519:4e0ec1ba72ecb4d933fb9987987f365935f4b90a251a80c0ff60b5977541591409e92040b8e361a0636a1f51171c572036c335d0317c358afa3a737c6e02eb0d
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser