unitedhealthcare.com

Observed 2026-07-12T18:31:51.756Z (8h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byProofpoint

1 subdomain · insurance

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat unitedhealthcare.com actually stands on - every host below is a signed observation

unitedhealthcare.com

A / AAAA

20.80.218.16620.221.105.198

Cloudflareserves the site

epla1.corpnamesvcs.comepla2.corpnamesvcs.com

corpnamesvcs.comanswers its DNS

mxb-0077b904.gslb.pphosted.commxa-0077b904.gslb.pphosted.com

Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.unitedhealthcare.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time304 ms

DNS resolutionNOERROR

Redirect chain

https://www.unitedhealthcare.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

20.80.218.166
20.221.105.198

MX 2

5mxb-0077b904.gslb.pphosted.com
5mxa-0077b904.gslb.pphosted.com

TXT 6

verification_token=urnXDESbKCLGVL8E7soU8jGMK
MS=ms72819716
adobe-idp-site-verification=9a5c47599b4f379d5e29ede339f3da7f9e1689f8e16709c98e397c86a1c68122
v=spf1 include:_spfv4.corpmailsvcs.com -all
v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
v=DNSSEC1; (detected)

NS 2

epla1.corpnamesvcs.com
epla2.corpnamesvcs.com

SOA 1

epla1.corpnamesvcs.com hostmaster.uhc.com

TLS Certificates (0)

None.

Subdomains (1)

www.unitedhealthcare.com

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for unitedhealthcare.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/unitedhealthcare.com">
  <img src="https://domaindrift.io/badge/unitedhealthcare.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for unitedhealthcare.com">
</a>

Ed25519 Receipt

Receipt ID: eec69106-6471-403f-baa3-635ca91af49b
Output Hash: c6450dbd80bd13bca5f0f488b767cf9cc2e62feddd1e95015a36698b28c40577
Signature: ed25519:cabc21a5747ebb32ad27191183d679080da67e095c758237d601b7b0fcdccaa31e91e8aa6dd1b15be828761c88f2dcec8164d09ae91c05634d1d198fff82c20b
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/unitedhealthcare.com