CONTINUOUS INTERNET TELEMETRY24H DRIFT159 material changesacross 111 domains · +13 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,361 curated domains not answeringlast probe, steadyERRORS28,495 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,464 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT159 material changesacross 111 domains · +13 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,361 curated domains not answeringlast probe, steadyERRORS28,495 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,464 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

zhaw.ch

Observed Jul 18, 2026, 13:44 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onSWITCH
Email byMicrosoft 365
Secured byLet's Encrypt
Also usesMiroGoogle Search Console
2 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat zhaw.ch actually stands on - every host below is a signed observation
zhaw.ch
A / AAAA
160.85.104.112
SWITCHserves the site
NS
ns1.zhaw.chns2.zhaw.chscsnms.switch.ch
zhaw.ch + switch.chanswers its DNS
MX
zhaw-ch.mail.protection.outlook.com
Microsoft 365receives its email
TLS
zhaw.ch
Let's Encryptissued its certificate

DNS Records

A 1

  • 160.85.104.112

MX 1

  • 10zhaw-ch.mail.protection.outlook.com

TXT 13

  • _b8eheu7l0wtfzgdebln3saiq7ll5ver
  • _ghknregu1xw6w2a5bn406p39on0t3jc
  • apple-domain-verification=MWKE61dsKIOMuk7T
  • QuoVadis=c2fb3b0c-1767-4b81-bb41-8c8f367b7745
  • d365mktkey=6ZeMuAGZs4aAyZvjUgaLja3hoehOT7SExbzDdOgkacEx
  • d365mktkey=9ZeWQxa3Y8ABgzxDlu70XboOazsztZf8lsQjnhqOyLEx
  • miro-verification=dda1cc2c2492084f3bacdc0d241d059a48dc856e
  • google-site-verification=1HzmtAQb-uAzy1KE5QN6yx-8rkOXxSex-ztYENlaDmc
  • google-site-verification=ApYGP-RPy0lIYX1tNvm1fdKodjtZ9tqfBAqJv3plD8g
  • intersight=06c2cbf99660cffd45623dad48932bc970e68e299be2fbde85283885383a127e

NS 3

  • ns1.zhaw.ch
  • ns2.zhaw.ch
  • scsnms.switch.ch

SOA 1

  • gm.zhaw.ch hostmaster.zhaw.ch

SRV 8

  • srv-app-041.zhaw.ch:5060 p10
  • srv-app-042.zhaw.ch:5060 p10
  • srv-app-041.zhaw.ch:5061 p10
  • srv-app-042.zhaw.ch:5061 p10
  • srv-app-041.zhaw.ch:5222 p10
  • srv-app-042.zhaw.ch:5222 p10
  • srv-app-041.zhaw.ch:5269 p10
  • srv-app-042.zhaw.ch:5269 p10

CAA 7

  • iodef "mailto:ictsecurity@zhaw.ch"
  • issue "amazon.com"
  • issue "digicert.com"
  • issue "letsencrypt.org"
  • issue "pki.goog"
  • issuewild "digicert.com"
  • issuewild "letsencrypt.org"

TLS Certificates (3)

Common NameIssuerExpires
zhaw.ch C=US, O=Let's Encrypt, CN=YR1 Sun, 06 Sep 2026 08:14:54 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for zhaw.ch. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for zhaw.ch <a href="https://domaindrift.io/t/zhaw.ch"> <img src="https://domaindrift.io/badge/zhaw.ch.svg" width="300" height="64" alt="DomainDrift signed observations for zhaw.ch"> </a>

Ed25519 Receipt

Receipt ID
0c2b9d37-7430-422b-82dc-af22dc8ac373
Output Hash
9a2aa1c9453fdcca0ef735c4f61c7206eea2c3bef9e6dee882cb13e2fa1cc2c6
Signature
ed25519:0e2177efc055eee06dc9eb551f89da2b9f35a2fd65623f3c122e7aa85fce15019b9fe389211277d8553807c25975bb4d5b3878d05afc265ccb27d35c29fc3f0b
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser