CONTINUOUS INTERNET TELEMETRY24H DRIFT141 material changesacross 105 domains · -517 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW4,024 curated domains not answering+1,195 vs yesterdayERRORS26,117 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED76,271 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT141 material changesacross 105 domains · -517 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW4,024 curated domains not answering+1,195 vs yesterdayERRORS26,117 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED76,271 throttled or blocked our scanner429 rate-limit / 403 bot-block

sanger.ac.uk

Observed Jul 18, 2026, 12:27 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Email byProofpoint
Secured byLet's Encrypt
Also usesDockerZoomGoogle Search ConsoleSlack
IPv6 · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat sanger.ac.uk actually stands on - every host below is a signed observation
sanger.ac.uk
A / AAAA
193.62.203.106193.62.203.1052001:630:206:4::1062001:630:206:4::105
2001serves the site
NS
auth0.dns.cam.ac.ukauth1.dns.cam.ac.ukdns2.sanger.ac.ukdns4.sanger.ac.uk+1 more
cam.ac.uk + sanger.ac.ukanswers its DNS
MX
mxb-002f8a01.gslb.pphosted.commxa-002f8a01.gslb.pphosted.com
Proofpointreceives its email
TLS
sanger.ac.uk
Let's Encryptissued its certificate

DNS Records

A 2

  • 193.62.203.106
  • 193.62.203.105

AAAA 2

  • 2001:630:206:4::106
  • 2001:630:206:4::105

MX 2

  • 10mxb-002f8a01.gslb.pphosted.com
  • 10mxa-002f8a01.gslb.pphosted.com

TXT 19

  • sophos-domain-verification=214a944779f205e0f0945ddf6c48d337428ad9104b14201f2f1e40ea84bfd412
  • sophos-domain-verification=83e5a3ed8fd0acb9e68b3b477ecf843e406d994b72761909df5d8cca02afb6df
  • openai-domain-verification=dv-mtLWlpSTO18mrRkOFzXZTOie
  • jamf-site-verification=7Rv8uOz7VLYndllYJ8QbkA
  • docker-verification=e0c8735e-0dcc-4bdb-8064-aee9880debea
  • neat-pulse-domain-verification-6VMrQ1X=53f557a4-0da0-417e-afaa-6c49a7a0268c
  • anthropic-domain-verification-fnfnv9=pRhquhzPJf280TVoVgMjCPR3J
  • asv=942494dfa84bd82cac0cb1a987652bf1
  • access-domain-verification=9f91aedf9264f5a8aab4c657012086ef0e28511c4f87db2ccf193c3b663c073f
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all

NS 5

  • auth0.dns.cam.ac.uk
  • auth1.dns.cam.ac.uk
  • dns2.sanger.ac.uk
  • dns4.sanger.ac.uk
  • dns1.sanger.ac.uk

SOA 1

  • dns1.sanger.ac.uk postmaster.sanger.ac.uk

SRV 2

  • expe-1b.sanger.ac.uk:5062 p0
  • expe-1a.sanger.ac.uk:5062 p0

TLS Certificates (3)

Common NameIssuerExpires
sanger.ac.uk C=US, O=Let's Encrypt, CN=YR1 Tue, 01 Sep 2026 10:12:04 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for sanger.ac.uk. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for sanger.ac.uk <a href="https://domaindrift.io/t/sanger.ac.uk"> <img src="https://domaindrift.io/badge/sanger.ac.uk.svg" width="300" height="64" alt="DomainDrift signed observations for sanger.ac.uk"> </a>

Ed25519 Receipt

Receipt ID
4dc7d2c9-6f1e-4c8d-b9a0-01e69ff9840b
Output Hash
a647147143475cb2c36e58ef499d444443f287614128eb0a16b3603b114caea8
Signature
ed25519:c978571ef099ec75afe6d66151cfffa06c23ceb53576bb958f188f2bc6f310430398219a871bc2be0f24f31e62094d0ba7896b1d4339091812f68e929ce00708
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser