CONTINUOUS INTERNET TELEMETRY24H DRIFT168 material changesacross 121 domains · +22 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,514 curated domains not answering+180 vs yesterdayERRORS29,851 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,259 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT168 material changesacross 121 domains · +22 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,514 curated domains not answering+180 vs yesterdayERRORS29,851 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,259 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

zoho.com

Observed Jul 18, 2026, 12:09 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onZOHO
Email byZoho Mail
Secured bySectigo
Registered withMarkMonitor Inc.
Also usesZoomGoogle Search ConsoleHubSpot
fintech_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat zoho.com actually stands on - every host below is a signed observation
zoho.com
A / AAAA
204.141.42.155
ZOHOserves the site
NS
ns1.zohocorp.comNS11.ZNS-53.comNS21.ZNS-53.NETNS31.ZNS-53.com+4 more
zohocorp.com + zns-53.com + moreanswers its DNS
MX
smtpin2.zoho.comsmtpin.zoho.comsmtpin3.zoho.com
Zoho Mailreceives its email
TLS
*.zoho.com
Sectigo Limitedissued its certificate

DNS Records

A 1

  • 204.141.42.155

MX 3

  • 20smtpin2.zoho.com
  • 10smtpin.zoho.com
  • 50smtpin3.zoho.com

TXT 20

  • OSSRH-65508
  • 5d7tzsjx9vpr6dwqfd9910mkffcr1893
  • _7w86ubhx27sgdoo84npral89s33t2u3
  • _cxpexq0rrrkb0kkkz3mc1v37kl4dsrp
  • _op091a6o68i6m2yma8y9axhq463xldm
  • qm36k1hcyk8f6rcncfpj7ngl5708cvhl
  • vgsr5l5dhfv2qr8g5ntl0w9jn9tnqr94
  • 2nb6vfc9zm9t9f941qhzh8c66z5x6lxp
  • openai-domain-verification=dv-cZm3nfyBwGQo4BZTvFnA8KfA
  • zoho-nimbus-mrePMidEyuuAwUlwP+s2IbAqvJIO0MkIbdfSbpojeiU=

NS 8

  • ns1.zohocorp.com
  • NS11.ZNS-53.com
  • NS21.ZNS-53.NET
  • NS31.ZNS-53.com
  • NS41.ZNS-53.NET
  • PDNS90.ULTRADNS.BIZ
  • PDNS90.ULTRADNS.com
  • PDNS90.ULTRADNS.NET

SOA 1

  • ns1.zohocorp.com dnsadmin.vtitan.com

CAA 3

  • issue "digicert.com"
  • issue "letsencrypt.org"
  • issue "sectigo.com"

TLS Certificates (3)

Common NameIssuerExpires
*.zoho.com C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 Thu, 22 Oct 2026 23:59:59 +0000
Sectigo Public Server Authentication CA DV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for zoho.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for zoho.com <a href="https://domaindrift.io/t/zoho.com"> <img src="https://domaindrift.io/badge/zoho.com.svg" width="300" height="64" alt="DomainDrift signed observations for zoho.com"> </a>

Ed25519 Receipt

Receipt ID
302aa165-98e1-41f1-9dd3-4735c5ec8ad6
Output Hash
97b09e09d22bd99a28f8efe476713e44425ff31d9f66a2f1f0449ccd841b6deb
Signature
ed25519:6f50f0b251db5eb480ef6d3da5ad466931773a4d77a06ed77f6a07a430358598d1eb89bf0198bd948391b93b9c2be19b5f1a9d59a62979e0130a631d1629bd01
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser