CONTINUOUS INTERNET TELEMETRY24H DRIFT2,893 material changesacross 2,548 domains · -505 vs yesterdayDNS DRIFT20 domains changed DNS providertop destination cloudflare.com · -7 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination reyrey.com · -2 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,962 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,893 material changesacross 2,548 domains · -505 vs yesterdayDNS DRIFT20 domains changed DNS providertop destination cloudflare.com · -7 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination reyrey.com · -2 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,962 responded with an errorlast probe · 5xx / 404 / 429 / 403

advocate.com

Observed 2026-07-13T05:10:23.210Z (5h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle (SPF sender)
Registered withNetwork Solutions, LLC
Also usesFacebook/MetaGoogle Search Console
4 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat advocate.com actually stands on - every host below is a signed observation
advocate.com
A / AAAA
54.243.223.18154.243.223.182
Cloudflareserves the site
NS
jill.ns.cloudflare.comkip.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
mx2-us1.ppe-hosted.commx1-us1.ppe-hosted.com
Google (SPF sender)receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.advocate.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time287 ms
DNS resolutionNOERROR
Redirect chain
https://www.advocate.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 54.243.223.181
  • 54.243.223.182

MX 2

  • 2mx2-us1.ppe-hosted.com
  • 1mx1-us1.ppe-hosted.com

TXT 9

  • MS=ms12132978
  • facebook-domain-verification=onshjxj70xr504wpbs56skj9pt5xjx
  • google-site-verification=9wrNcTougywr5hTUFVObhU2KaI2qolWxFViHhjYPuIw
  • v=spf1 a:dispatch-us.ppe-hosted.com include:spf.protection.outlook.com a:dispatch-us.ppe-hosted.com include:_spf.google.com ~all
  • ppe-8a637a023221af13b9dc55bc88fa3c3b310abc79
  • google-site-verification=6EQs--zSucYN8--bOmkFLYLWxT4Hs7Aiar8jIhjeSTc
  • apple-domain-verification=PEIFcajxyie0u8B0
  • google-site-verification=vZZ06pxHREu7osdo3tXQngAqGNaX0vLUXVUxiOPleW0
  • v=DMARC1; p=reject; rua=mailto:cdtxa8bf@ag.us.dmarcian.com;

NS 2

  • jill.ns.cloudflare.com
  • kip.ns.cloudflare.com

SOA 1

  • jill.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for advocate.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for advocate.com <a href="https://domaindrift.io/t/advocate.com"> <img src="https://domaindrift.io/badge/advocate.com.svg" width="300" height="64" alt="DomainDrift signed observations for advocate.com"> </a>

Ed25519 Receipt

Receipt ID
2d823fd3-c04e-4717-ad60-0fe9a0661741
Output Hash
fb9a70dd6dcbba54fd1a3d44fd224d7b4b7cfe9d54a36be8ce90fb2f8ca1d4e0
Signature
ed25519:c252f29cb0d7a4ed8c4de5bd095136f46811af3501b18163b4be602d353146d0fd87f7ddd35ae799fa53eea5e4ad5f122db6a50c22cacd177aa519255b919007
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser