CONTINUOUS INTERNET TELEMETRY24H DRIFT945 material changesacross 849 domains · +491 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination parity.domains · +20 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW2,717 curated domains not answering+502 vs yesterdayERRORS10,584 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,934 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT945 material changesacross 849 domains · +491 vs yesterdayDNS DRIFT24 domains changed DNS providertop destination parity.domains · +20 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW2,717 curated domains not answering+502 vs yesterdayERRORS10,584 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,934 throttled or blocked our scanner429 rate-limit / 403 bot-block

uri.edu

Observed 2026-07-15T09:37:46.452Z (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesFacebook/MetaGoogle Search Console1Password
IPv6 · 11 subdomains · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat uri.edu actually stands on - every host below is a signed observation
uri.edu
A / AAAA
23.185.0.12620:12a:8001::12620:12a:8000::1
Cloudflareserves the site
NS
bigbluebug.uri.edunetops.uri.eduphloem.uoregon.edu
uri.edu + uoregon.eduanswers its DNS
MX
mxb-0028cd01.gslb.pphosted.commxa-0028cd01.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.uri.edu/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time25 ms
DNS resolutionNOERROR
Redirect chain
https://www.uri.edu/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 23.185.0.1

AAAA 2

  • 2620:12a:8001::1
  • 2620:12a:8000::1

MX 2

  • 10mxb-0028cd01.gslb.pphosted.com
  • 10mxa-0028cd01.gslb.pphosted.com

TXT 18

  • facebook-domain-verification=6wvywppeqig8xf2vgzhsodi43xni8h
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
  • brevo-code:fb71dabdf8e7707f0794948a775af576
  • brevo-code:86a47649b26050813403e6db2e3d6722
  • canva-site-verification=KQD002AuWSk-iUBsorDc_Q
  • SFMC-hfhztYdAtyclSmFl6F_W5cfS2MrOSWk412Og2E1n
  • google-site-verification=cqJJGNyzccXi3KuYx8nwpviQM3zwrWeB-9alTYKGkNY
  • openai-domain-verification=dv-vRnCzQVR8f2lwPcZ6pkfG4Eb
  • MS=00A782D7B5FA5C4CDB79B9EAA5D78A43E2E2BD1E
  • asv=b871a706f72d6dda6e158c3a153b69ed

NS 3

  • bigbluebug.uri.edu
  • netops.uri.edu
  • phloem.uoregon.edu

SOA 1

  • netops.uri.edu hostmaster.uri.edu

CAA 14

  • iodef mailto:hostmaster@uri.edu
  • issue thawte.com
  • issue trust-provider.com
  • issue sectigo.com
  • issue securetrust.com
  • issue comodoca.com
  • issue amazonaws.com
  • issue amazontrust.com
  • issue awstrust.com
  • issue amazon.com

TLS Certificates (0)

None.

Subdomains (11)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for uri.edu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for uri.edu <a href="https://domaindrift.io/t/uri.edu"> <img src="https://domaindrift.io/badge/uri.edu.svg" width="300" height="64" alt="DomainDrift signed observations for uri.edu"> </a>

Ed25519 Receipt

Receipt ID
6c3156e1-3912-4725-abab-7319e52dacde
Output Hash
9089d0740d56d8d2d686772bce34e61117cd7eff03b215d1f51d9a5ab4fbd244
Signature
ed25519:7fcf946cfbd15e734a818e8d77e7d7e350c765cbb3e74be3a87ba51e5e93db78eb962fb4ab8163965e43609a0779b651a4d5871618b458c9e92e2c25a4e4df03
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser