threema.com

Observed Jul 28, 2026, 17:52 UTC (7h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Secured bySectigo

Also usesGoogle Search Console

IPv6 · tranco_100k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat threema.com actually stands on - every host below is a signed observation

threema.com

A / AAAA

203.56.112.782a14:3e40:112:312::78

2a14serves the site

ns1.threema.chns2.threema.chns5.threema.ch

threema.chanswers its DNS

TLS

*.threema.com

Sectigo Limitedissued its certificate

DNS Records

A 1

203.56.112.78

AAAA 1

2a14:3e40:112:312::78

TXT 4

v=spf1 -all
dbf37de8b6f793a18828fb4fbdd451b6
google-site-verification=0JtLfG4Qk0bhvlyCU9HqmlfWaUcOZX8nkWctdblaFf4
v=DMARC1; p=reject; aspf=s; adkim=s;

NS 3

ns1.threema.ch
ns2.threema.ch
ns5.threema.ch

SOA 1

ns1.threema.ch hostmaster.threema.ch

CAA 4

iodef "mailto:security@threema.ch"
issue "comodoca.com"
issue "sectigo.com"
issue "trust-provider.com"

TLS Certificates (3)

Common Name	Issuer	Expires
`*.threema.com`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV E36	Wed, 13 Jan 2027 23:59:59 +0000
`Sectigo Public Server Authentication CA OV E36`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root E46	Fri, 21 Mar 2036 23:59:59 +0000
`Sectigo Public Server Authentication Root E46`	C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority	Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for threema.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/threema.com">
  <img src="https://domaindrift.io/badge/threema.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for threema.com">
</a>

Ed25519 Receipt

Receipt ID: rcpt_97e1b922f2cc2545
Output Hash: 2f0ff7f84763c485bf41b410848353af030efaa4dd8ae055645bae6be30a0e0e
Signature: ed25519:f03eda5b3f1816441c7be0c1376ae74f7e18d2da6bf76a2038d6aec589cb71efec3d678106874f93376bb2085edb61a25751f46209aed2969932b8e09f81890d
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/threema.com