CONTINUOUS INTERNET TELEMETRY24H DRIFT10,475 material changesacross 10,085 domains · last 24h · -154 vs yesterdayDNS DRIFT662 domains changed DNS providertop destination cloudflare.com · -118 vs yesterdayEMAIL DRIFT177 domains switched email providertop destination google.com · +7 vs yesterdayCERT DRIFT226 domains switched issuing CA24h · -4 vs yesterdayNOW708 curated domains not reachable-641 vs yesterdaySITE ERRORS18,095 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED96,688 throttled or blocked our scanner429 rate-limit / 403 bot-block

umr.com

Observed Jul 21, 2026, 16:29 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onUnitedhealthcare
Email byProofpoint
Secured bySectigo
Also usesDocuSignMiro
15 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat umr.com actually stands on - every host below is a signed observation
umr.com
A / AAAA
168.183.44.222
Unitedhealthcareserves the site
NS
epla1.corpnamesvcs.comepla2.corpnamesvcs.com
corpnamesvcs.comanswers its DNS
MX
mxa-0077b904.gslb.pphosted.commxb-0077b904.gslb.pphosted.com
Proofpointreceives its email
TLS
prod3.umr.com
Sectigo Limitedissued its certificate

DNS Records

A 1

  • 168.183.44.222

MX 2

  • 5mxa-0077b904.gslb.pphosted.com
  • 5mxb-0077b904.gslb.pphosted.com

TXT 14

  • MS=ms17382569
  • 3c5fccc2-9453-4c7f-93ed-ef616f8081e5
  • MS=98D9C24759CC1375942B8C54C54619D5D763C21F
  • asv_domain=3ebae330b4c8653e7b285def62a811ea
  • verification_token=3Z3O50TWeLEW5AfID2jhzjnTi
  • docusign=ee02416d-f3ad-464a-8e6b-948c77b04c15docusign=06d3e119-a2fb-45ec-9a32-d383989ac986
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • miro-verification=5ea04a0c26989ed5656ae2b88aa2e5c474f973ab
  • smartsheet-site-validation=8DjPYrNTAaKJA_MwpijPEIJYzkquECSQ
  • insomnia-validation=bd6d761368e64109bd773ef8d96faca1b865e030b81e5549806e921a1aa9b1af

NS 2

  • epla1.corpnamesvcs.com
  • epla2.corpnamesvcs.com

SOA 1

  • epla1.corpnamesvcs.com hostmaster.uhc.com

TLS Certificates (5)

Common NameIssuerExpires
prod3.umr.com C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36 Sat, 27 Feb 2027 23:59:59 +0000
Sectigo Public Server Authentication CA OV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000
USERTrust RSA Certification Authority C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Sun, 31 Dec 2028 23:59:59 +0000
AAA Certificate Services C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Sun, 31 Dec 2028 23:59:59 +0000

Subdomains (15)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for umr.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for umr.com <a href="https://domaindrift.io/t/umr.com"> <img src="https://domaindrift.io/badge/umr.com.svg" width="300" height="64" alt="DomainDrift signed observations for umr.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_ceafec87bdbb0c58
Output Hash
1daed51a23336047bcafe60bf7557e4bb68c6d11a0c73ed739b26eea63dcef33
Signature
ed25519:e6dc2663e009d5fce15cd90240ed7478b7cdb080559d8fed6ff0556b65fa92da9aaf86f6273ebc2e52393c13e2e38ac030af5f3f7ab74df21286016ceea35c0f
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser