CONTINUOUS INTERNET TELEMETRY24H DRIFT636 material changesacross 539 domains · -22 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination kirklanddc.comCERT DRIFT2 domains switched issuing CA24hNOW2,887 curated domains not answeringlast probe, steadyERRORS19,297 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED51,490 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT636 material changesacross 539 domains · -22 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination kirklanddc.comCERT DRIFT2 domains switched issuing CA24hNOW2,887 curated domains not answeringlast probe, steadyERRORS19,297 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED51,490 throttled or blocked our scanner429 rate-limit / 403 bot-block

ur.com

Observed Jul 18, 2026, 13:59 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall
Runs onCloudflare
Email bySalesforce
Secured byDigiCert
Registered withGoDaddy.com, LLC
Also usesDocuSignGoogle Search Console
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ur.com actually stands on - every host below is a signed observation
ur.com
A / AAAA
63.241.166.16
Cloudflareserves the site
NS
dbru.br.ns.els-gms.att.netdmtu.mt.ns.els-gms.att.net
att.netanswers its DNS
MX
mx1.hc3869-10.iphmx.commx2.hc3869-10.iphmx.com
Salesforcereceives its email
TLS
*.ur.com
DigiCert Incissued its certificate

DNS Records

A 1

  • 63.241.166.16

MX 2

  • 20mx1.hc3869-10.iphmx.com
  • 20mx2.hc3869-10.iphmx.com

TXT 15

  • v=spf1 a:esa.hc3869-10.iphmx.com include:spf2.sedgwick.com ip4:18.222.48.42 ip4:184.94.241.137 ip4:208.90.58.189 include:_spf.salesforce.com include:_spf.sidetrade.net -all
  • adobe-idp-site-verification=a6530eaa20bbd00a66ba9f6a994f6c84a3f33272a78c68ac917ad4ea68567cfe
  • openai-domain-verification=dv-5XcGpKzsR7fNPAwlaEXyeFXD
  • abuseipdb-verification=ZubOu8aR
  • anthropic-domain-verification-2dnbd6=3NkRxAzCucsJPKn0qywZDs6Ef
  • duo_sso_verification=hIgwc2Vp2yn4b2xz4rKytW5UyMv8xTKgUOAwwwfkyjFvWKmag6ZsSDGRlgYCMQZ7
  • docusign=0fb10708-9abd-4815-b22c-0eb0d2e05513
  • webexdomainverification.4C675B878403B136E053AB06FC0A3F65=a6270f0b-ce88-42f5-bdc1-10a43b475a8e
  • cisco-ci-domain-verification=53987cdd87e16f5dd271513bb8a4b87a4637a122b55d5a2f8885cefabca4bd6f
  • MS=D772C28058A2996F82D4B002AD2D160131697785

NS 2

  • dbru.br.ns.els-gms.att.net
  • dmtu.mt.ns.els-gms.att.net

SOA 1

  • dbru.br.ns.els-gms.att.net rm-hostmaster.ems.att.com

SRV 1

  • sdcmravcse.ur.com:5061 p0

TLS Certificates (2)

Common NameIssuerExpires
*.ur.com C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 Thu, 17 Dec 2026 23:59:59 +0000
DigiCert Global G2 TLS RSA SHA256 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Sat, 29 Mar 2031 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ur.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ur.com <a href="https://domaindrift.io/t/ur.com"> <img src="https://domaindrift.io/badge/ur.com.svg" width="300" height="64" alt="DomainDrift signed observations for ur.com"> </a>

Ed25519 Receipt

Receipt ID
0566b3d1-beb4-4d8a-af34-578817132a82
Output Hash
40285205278980a8194d944f248251c6a3989e5391dff5089da4bbaca520b9fe
Signature
ed25519:b8cd2b2900ac022647a07cada510b84f954a7def07fa1285bdc0d1d42e64828267e7787621f9f9ce33e460de909f1f2864811854f39254dbb3d9adc4062a2301
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser