CONTINUOUS INTERNET TELEMETRY24H DRIFT1,106 material changesacross 1,004 domains · -530 vs yesterdayDNS DRIFT11 domains changed DNS providertop destination commonmx.com · -6 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination improvmx.com · -3 vs yesterdayNOW32,911 curated domains not answering+18,488 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,106 material changesacross 1,004 domains · -530 vs yesterdayDNS DRIFT11 domains changed DNS providertop destination commonmx.com · -6 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination improvmx.com · -3 vs yesterdayNOW32,911 curated domains not answering+18,488 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block

memorial.org

Observed 2026-07-15T13:06:32.228Z (19h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Registered withMarkMonitor Inc.
Also usesGoogle Search ConsoleZoom
IPv6 · 3 subdomains · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat memorial.org actually stands on - every host below is a signed observation
memorial.org
A / AAAA
172.64.155.36104.18.32.2202a06:98c1:3109::ac40:9b242606:4700:4409::6812:20dc
Cloudflareserves the site
NS
albert.ns.cloudflare.combeth.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
mx0a-00116001.pphosted.commx0b-00116001.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.memorial.org/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time27 ms
DNS resolutionNOERROR
Redirect chain
https://www.memorial.org/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 172.64.155.36
  • 104.18.32.220

AAAA 2

  • 2a06:98c1:3109::ac40:9b24
  • 2606:4700:4409::6812:20dc

MX 2

  • 10mx0a-00116001.pphosted.com
  • 10mx0b-00116001.pphosted.com

TXT 9

  • adobe-idp-site-verification=831ccb83622ea760cc5d8fa63aec81b8072594de6d8e1139177d65e6c1a43948
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • google-site-verification=nGBYnktBk6_VIs9Wqnc9r1yg5cspixcBnxGFjaG3cC4
  • wfnxg1FbSprKuOjpVBACJgf0x/+51LILXKpzt7CVA2MgRVY3GvoqrFTsGftlx3MI2Sa9zdtYmddhk0PLLM1cyQ==
  • zj33v4tslhkd8pynm9vy9wnw3v1v4j66
  • MS=ms83018887
  • ZOOM_verify_oRpP7I8E79uvYFSahXHjDX
  • v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
  • v=DKIM1; (detected)

NS 2

  • albert.ns.cloudflare.com
  • beth.ns.cloudflare.com

SOA 1

  • albert.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for memorial.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for memorial.org <a href="https://domaindrift.io/t/memorial.org"> <img src="https://domaindrift.io/badge/memorial.org.svg" width="300" height="64" alt="DomainDrift signed observations for memorial.org"> </a>

Ed25519 Receipt

Receipt ID
e925dfe1-5fe1-4912-a03e-fc2b20a96c8f
Output Hash
24103a5b3882266b0cfb10f9239bc0f7502fb38207d5d1fdd07ab13cdbded9b0
Signature
ed25519:6c59b03b5171012423a67e0756399732f948822eeabbd70d549a5b34a22901ef3563d0d21eaa3b1151710d264a7f0b520527199c8a97727ab247fecedf9aed02
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser