ursa.fi

Observed Jul 25, 2026, 15:23 UTC (8d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Email byGoogle Workspace

Secured byLet's Encrypt

Also usesGoogle Search Console

1 subdomain · tranco

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat ursa.fi actually stands on - every host below is a signed observation

ursa.fi

A / AAAA

185.218.88.68

unattributedserves the site

cp-ns2.wmhost.comcp-ns1.wmhost.com

wmhost.comanswers its DNS

alt4.aspmx.l.google.comaspmx.l.google.comalt1.aspmx.l.google.comalt3.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

ursa.fi

Let's Encryptissued its certificate

DNS Records

A 1

185.218.88.68

MX 5

10alt4.aspmx.l.google.com
1aspmx.l.google.com
5alt1.aspmx.l.google.com
10alt3.aspmx.l.google.com
5alt2.aspmx.l.google.com

TXT 4

google-site-verification=KA2z9A3_0QL0-q9cjlnIgchnMXY0CvI5IPczY1ZIrIA
MS=ms35758389
v=spf1 ip4:89.166.50.73 include:_spf.google.com ip4:193.166.130.208 ip4:193.166.130.209 ip4:185.218.88.178 ip4:89.166.51.113 ip4:185.218.88.68 -all
v=DMARC1; p=none; rua=mailto:dmarcreports@ursa.fi

NS 2

cp-ns2.wmhost.com
cp-ns1.wmhost.com

SOA 1

cp-ns1.wmhost.com root.wmhost.com

SRV 1

cpanelemaildiscovery.cpanel.net:443 p0

TLS Certificates (4)

Common Name	Issuer	Expires
`ursa.fi`	C=US, O=Let's Encrypt, CN=YE1	Tue, 01 Sep 2026 07:01:18 +0000
`YE1`	C=US, O=ISRG, CN=Root YE	Sat, 02 Sep 2028 23:59:59 +0000
`Root YE`	C=US, O=Internet Security Research Group, CN=ISRG Root X2	Thu, 02 Sep 2032 23:59:59 +0000
`ISRG Root X2`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

www.ursa.fi

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ursa.fi. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/ursa.fi">
  <img src="https://domaindrift.io/badge/ursa.fi.svg"
       width="300" height="64" alt="DomainDrift signed observations for ursa.fi">
</a>

Ed25519 Receipt

Receipt ID: rcpt_86f79630b9673ba2
Output Hash: 24020a7cf2cdd054d40e009dc051348875143a584870db2ecff259c9379e940e
Signature: ed25519:452c4250006fa0193f39135487ec63791b9ec9553d1f2aa6654917f82f4c145e18fe0eba1aac91500cae8a82efeee1837641c4c4a2c369345fb7012b11b3500e
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/ursa.fi