CONTINUOUS INTERNET TELEMETRY24H DRIFT7,702 material changesacross 7,396 domainsDNS DRIFT544 domains changed DNS providertop destination parity.domainsEMAIL DRIFT101 domains switched email providertop destination google.comCERT DRIFT176 domains switched issuing CA24h

zer0day.to

Observed Jul 22, 2026, 00:47 UTC (14h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onAmazon
Secured byGoDaddy.com
Registered withNAMECHEAP
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat zer0day.to actually stands on - every host below is a signed observation
zer0day.to
A / AAAA
76.223.54.14613.248.169.48
Amazonserves the site
NS
ns1.afternic.comns2.afternic.com
afternic.comanswers its DNS
TLS
zer0day.to
GoDaddy.comissued its certificate

DNS Records

A 2

  • 76.223.54.146
  • 13.248.169.48

MX 1

  • 0

TXT 5

  • v=spf1 -all
  • v=spf1 -all
  • v=spf1 -all
  • v=spf1 -all
  • v=spf1 -all

NS 2

  • ns1.afternic.com
  • ns2.afternic.com

SOA 1

  • ns2.afternic.com dns.jomax.net

TLS Certificates (4)

Common NameIssuerExpires
zer0day.to C=US, O=GoDaddy.com, CN=GoDaddy TLS Intermediate CA DV - R1v1 Sat, 05 Dec 2026 18:20:48 +0000
GoDaddy TLS Intermediate CA DV - R1v1 C=US, O=GoDaddy.com, CN=GoDaddy TLS Root CA - R1 Fri, 24 Aug 2040 11:59:59 +0000
GoDaddy TLS Root CA - R1 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2 Thu, 31 Dec 2037 23:59:59 +0000
Go Daddy Root Certificate Authority - G2 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2 Thu, 31 Dec 2037 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for zer0day.to. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for zer0day.to <a href="https://domaindrift.io/t/zer0day.to"> <img src="https://domaindrift.io/badge/zer0day.to.svg" width="300" height="64" alt="DomainDrift signed observations for zer0day.to"> </a>

Ed25519 Receipt

Receipt ID
rcpt_43cc0234b77ae999
Output Hash
16bc3e0e45c5d7b08cda894d153f39bf8bce4ff75965e5f7f8e1918a2ec9f616
Signature
ed25519:c703bd64a79c21c885593db2ca36ec6979091971fd3679a2c9364b2062d33427fcc62ee38209797d5c301bd9154fd007dd2715a1049c1300f92adffe6bc21e09
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser