CONTINUOUS INTERNET TELEMETRY24H DRIFT1,967 material changesacross 1,786 domains · -584 vs yesterdayDNS DRIFT14 domains changed DNS providertop destination afternic.com · -2 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24h · -3 vs yesterdayNOW3,403 curated domains not answeringlast probe, steadyERRORS10,889 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT1,967 material changesacross 1,786 domains · -584 vs yesterdayDNS DRIFT14 domains changed DNS providertop destination afternic.com · -2 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24h · -3 vs yesterdayNOW3,403 curated domains not answeringlast probe, steadyERRORS10,889 responded with an errorlast probe · 5xx / 404 / 429 / 403

onit.com

Observed 2026-07-14T01:47:55.655Z (15h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMimecast
Also usesDocuSign1PasswordAtlassianGoogle Search ConsoleHubSpotMiro
94 subdomains · legal
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat onit.com actually stands on - every host below is a signed observation
onit.com
A / AAAA
141.193.213.21141.193.213.20
Cloudflareserves the site
NS
erin.ns.cloudflare.comduke.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
usb-smtp-inbound-1.mimecast.comusb-smtp-inbound-2.mimecast.com
Mimecastreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.onit.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/3
TLS issuernot observed
Behind Cloudflareyes
Response time176 ms
DNS resolutionNOERROR
Redirect chain
https://www.onit.com/
MCP This domain advertises an AI service endpoint at _mcp._tcp.
78ffef61888f4cea88d2f716f5f123ef

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 141.193.213.21
  • 141.193.213.20

MX 2

  • 10usb-smtp-inbound-1.mimecast.com
  • 10usb-smtp-inbound-2.mimecast.com

TXT 29

  • hibp-verify=dweb_uir19klg5nysb80fibdz73ts
  • 0ed1fe018abff3ca6c439148fb91c49ef467fa75c1
  • docusign=6482eb57-133f-42e6-94f4-0f5c24e3924b
  • Demonstration of domain control for DigiCert order #00839709, Validation e-mail: eric.smith@onit.com
  • asv=6b3288259e8aefdc91ae392c8bbcc691
  • 1password-site-verification=FTTU74KKTNG2PEJYMSK7MOYANY
  • MS=ms21109679
  • atlassian-domain-verification=8TDn/6PXGyYZFSYm8lbae4V8tIX7NV+hw4Lp5n5GeBpvlsDVuN9ny9gqdj/iGnNW
  • jamf-site-verification=dgB2lE95txbjpN7MKdmWmw
  • box-domain-verification=eb501ee3a94383507a49cf301822b9a26c8383f6d50fef8cca80061a3a0a870e

NS 2

  • erin.ns.cloudflare.com
  • duke.ns.cloudflare.com

SOA 1

  • duke.ns.cloudflare.com dns.cloudflare.com

CAA 18

  • issue amazonaws.com
  • issuewild letsencrypt.org
  • issuewild amazon.com
  • issuewild awstrust.com
  • issuewild amazonaws.com
  • issuewild ssl.com
  • issue comodoca.com
  • issuewild pki.goog; cansignhttpexchanges=yes
  • issuewild comodoca.com
  • issue amazon.com

TLS Certificates (0)

None.

Subdomains (94)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for onit.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for onit.com <a href="https://domaindrift.io/t/onit.com"> <img src="https://domaindrift.io/badge/onit.com.svg" width="300" height="64" alt="DomainDrift signed observations for onit.com"> </a>

Ed25519 Receipt

Receipt ID
caaede96-58ba-47f5-a29b-987e481a7930
Output Hash
0124d35606258fece968d6724b3263f6120f91f94e5dcd086368155e6ab6413d
Signature
ed25519:89574069d5f05427d523eb390c718a6a3152b3a5eb42cf71fff814b2aa64fb6e6e54b7f181d1878fadea480ad7197e6952af6362a00eda6dd072c03e8dea7706
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser