ref-so.ch

Observed Aug 11, 2026, 05:44 UTC (6d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of ref-so.ch was taken 6d ago

ref-so.ch is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting ref-so.ch under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch ref-so.ch Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Up right now
Secured byLet's Encrypt
IPv6 · 1 subdomain · domcop
Every line above is a signed observation. Check the math at the bottom of the page.
DRIFT

Steady. No change on record for ref-so.ch in the last day; this reading matches the one before it. The steady record is signed like every other reading. Watch it to catch the next move the moment it lands.

INFRASTRUCTURE MAPwhat ref-so.ch actually stands on - every host below is a signed observation
ref-so.ch
A / AAAA
149.126.4.322a01:ab20:0:4::32
2a01serves the site
NS
ns1.cyon.chns2.cyon.ch
cyon.chanswers its DNS
MX
mail.ref-so.ch
ref-so.chreceives its email
TLS
refso.cyon.site
Let's Encryptissued its certificate

DNS Records

A 1

  • 149.126.4.32

AAAA 1

  • 2a01:ab20:0:4::32

MX 1

  • 0mail.ref-so.ch

TXT 1

  • v=spf1 +a +mx +ip4:194.126.200.0/24 +ip4:149.126.0.0/21 -all

NS 2

  • ns1.cyon.ch
  • ns2.cyon.ch

SOA 1

  • ns1.cyon.ch server.cyon.ch

SRV 1

  • maildiscovery.cyon.ch:443 p0

TLS Certificates (3)

Common NameIssuerExpires
refso.cyon.site C=US, O=Let's Encrypt, CN=YR1 Sat, 12 Sep 2026 17:14:12 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_d9c380c5715843c4
Output Hash
6cf0ceee1b3406f37d0d1c0d8e34bb8c47e286c5f7a14aa0ecd260c76b58e392
Signature
ed25519:3998412deaefe6256f7be7b732e32bf0e5bb961657b229ecebfd6e4874db4ec3863d8192415f372fe3584afd89659be45da8d14cbd6abcc9777e813b7c991700
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser
CONTINUOUS INTERNET TELEMETRY24H DRIFT42,736 material changesacross 40,484 domains · 24h to ~2h ago · +3,496 vs yesterdayROTATION75 domains moved DNS from magpiedns.com to kirklanddc.com, 75 moved backa rotation loop, not a migration · 24hEMAIL DRIFT7 domains switched email provider24hNOW490 curated domains not reachable-101 vs yesterdaySITE ERRORS33,681 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 116,858 sites429 rate-limit / 403 bot-block, a posture signal