CONTINUOUS INTERNET TELEMETRY24H DRIFT1,642 material changesacross 1,490 domains · -317 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination cloudflare.com · -2 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination outlook.com · +5 vs yesterdayNOW14,242 curated domains not answering+10,813 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,642 material changesacross 1,490 domains · -317 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination cloudflare.com · -2 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination outlook.com · +5 vs yesterdayNOW14,242 curated domains not answering+10,813 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block

oxygen.com

Observed 2026-07-15T02:45:11.112Z (21h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Registered withMarkMonitor Inc.
Also usesGoogle Search Console
8 subdomains · media_entertainment
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat oxygen.com actually stands on - every host below is a signed observation
oxygen.com
A / AAAA
13.248.160.13776.223.34.124
Cloudflareserves the site
NS
pdns129.ultradns.netpdns129.ultradns.bizpdns129.ultradns.compdns129.ultradns.org
ultradns.net + ultradns.biz + moreanswers its DNS
MX
mx0b-00a17301.pphosted.commx0a-00a17301.pphosted.commxb-00a17301.gslb.pphosted.commxa-00a17301.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.oxygen.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time90 ms
DNS resolutionNOERROR
Redirect chain
https://www.oxygen.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 13.248.160.137
  • 76.223.34.124

MX 4

  • 20mx0b-00a17301.pphosted.com
  • 20mx0a-00a17301.pphosted.com
  • 10mxb-00a17301.gslb.pphosted.com
  • 10mxa-00a17301.gslb.pphosted.com

TXT 12

  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • google-site-verification=YiJIX6Icl0ZJb1FVBUevvBFvqXjCRnRMqS9Ej6IdOG8
  • google-site-verification=lyZFf8dBuiMSXohV77iG21jD7GyQPSJk13EeDhlx4no
  • _x1iaktgovhab5diaekswfxn5c5xnwhw
  • _pcrne00dgm6talakf0o9iplh8tetflg
  • google-site-verification=FWPzgR2tNH-G_C9Reooy-HpIkwUxpt26CAz__8oPWd8
  • _6y2s7e5162i2mpmraq5jozur3hzhqpe
  • MS=ms28948922
  • dropbox-domain-verification=s7cdtsm7ch0g
  • amazonses:pZq3IG2utBr37hF9Zqmaa+UZruRJlYdDs7XV0A+AH60=

NS 4

  • pdns129.ultradns.net
  • pdns129.ultradns.biz
  • pdns129.ultradns.com
  • pdns129.ultradns.org

SOA 1

  • pdns129.ultradns.net domain\.admin.versantmedia.com

TLS Certificates (0)

None.

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for oxygen.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for oxygen.com <a href="https://domaindrift.io/t/oxygen.com"> <img src="https://domaindrift.io/badge/oxygen.com.svg" width="300" height="64" alt="DomainDrift signed observations for oxygen.com"> </a>

Ed25519 Receipt

Receipt ID
f69dc7f4-85dd-49b3-971d-4aae6288a47b
Output Hash
46e9b8c0b3f7b1b730eb4531b44480a8f1d1fcdbbfaf236b9e26e1c9958ecf99
Signature
ed25519:34c79ebeb38db624265ad5b3627f9711e62c3f1629e99a4547a01e8f32951aa380fe338bd59c8ccc581c1bab5fcaff946d251e36b836d03523fde107fde20606
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser