CONTINUOUS INTERNET TELEMETRY24H DRIFT1,328 material changesacross 853 domains · last 24h · +521 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT2 domains switched email providertop destination hostmetro.comCERT DRIFT2 domains switched issuing CA24hNOW476 curated domains not reachable+54 vs yesterdaySITE ERRORS17,639 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 101,224 sites429 rate-limit / 403 bot-block, a posture signal

uclh.nhs.uk

Observed Jul 24, 2026, 17:52 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Guarded by a firewall
Runs onCloudflare
Secured bySectigo
1 subdomain · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat uclh.nhs.uk actually stands on - every host below is a signed observation
uclh.nhs.uk
A / AAAA
104.20.3.231
Cloudflareserves the site
NS
ns1.nhs.ukns2.nhs.ukns3.nhs.ukns4.nhs.uk
nhs.ukanswers its DNS
MX
mail.nhs.uk
nhs.ukreceives its email
TLS
uclh.nhs.uk
Sectigo Limitedissued its certificate

DNS Records

A 1

  • 104.20.3.231

MX 1

  • 50mail.nhs.uk

TXT 8

  • MS=ms39910975
  • MS=ms54935371
  • MS=ms76823341
  • _60a4w8scr50fnipsfpfngtv47pg9k78
  • v=spf1 ip4:185.220.61.90 include:_spf.nhs.net include:outboundmail.blackbaud.net ~all
  • v=DMARC1; p=none; rua=mailto:uclh.dmarc@nhs.net
  • globalsign-domain-verification=C0B620546831CF1A1AB4BD5B9B39B4F8
  • globalsign-domain-verification=C0B620546831CF1A1AB4BD5B9B39B4F8

NS 4

  • ns1.nhs.uk
  • ns2.nhs.uk
  • ns3.nhs.uk
  • ns4.nhs.uk

SOA 1

  • ns1.nhs.uk hostmaster.nominet.uk

TLS Certificates (4)

Common NameIssuerExpires
uclh.nhs.uk C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 Fri, 18 Dec 2026 23:59:59 +0000
Sectigo Public Server Authentication CA DV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000
USERTrust RSA Certification Authority C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Sun, 31 Dec 2028 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for uclh.nhs.uk. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for uclh.nhs.uk <a href="https://domaindrift.io/t/uclh.nhs.uk"> <img src="https://domaindrift.io/badge/uclh.nhs.uk.svg" width="300" height="64" alt="DomainDrift signed observations for uclh.nhs.uk"> </a>

Ed25519 Receipt

Receipt ID
rcpt_492ad4a39b21880f
Output Hash
3d4e425185b8c0240c96abe8600ce637dbd9a2ae29ed7b122a0593ff35cc211d
Signature
ed25519:4fb343ba557b0fb040bee7ae06f23a6d9cf683475ac785ce004a1c031116104b6598d45d82bbcd34bf372f8cbd88d328863c4b509bd92811ec37e59a3bc6f208
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser