diff --git a/src/keydb.rs b/src/keydb.rs
index 8da05da..a9f18b1 100644
--- a/src/keydb.rs
+++ b/src/keydb.rs
@@ -846,7 +846,7 @@ mod tests {
 
         let body = b"0xAABBCCDDAABBCCDDAABBCCDDAABBCCDD = Test\n".to_vec();
         let result = src
-            .update(|_url| Ok(body.clone()), "http://example.invalid/keydb.zip")
+            .update(|_url| Ok(body.clone()), "http://example.test/keydb.zip")
             .expect("update must succeed with a good fetch");
 
         assert_eq!(result.path, target, "update must save to the source's path");
diff --git a/src/online.rs b/src/online.rs
index 26c9e19..c18a12b 100644
--- a/src/online.rs
+++ b/src/online.rs
@@ -416,7 +416,7 @@ mod tests {
     /// it's the deliberate no-op stub.
     #[test]
     fn host_certs_is_noop_empty_no_network() {
-        let src = OnlineSource::new("http://example.invalid/keys", "secret");
+        let src = OnlineSource::new("http://example.test/keys", "secret");
         assert!(
             KeySource::host_certs(&src, None).is_empty(),
             "online host_certs must be an empty no-op (no network)"
diff --git a/tests/key_sources.rs b/tests/key_sources.rs
index a3db556..fba1730 100644
--- a/tests/key_sources.rs
+++ b/tests/key_sources.rs
@@ -225,7 +225,7 @@ fn online_source_unconfigured_is_silent_no_op() {
 
 #[test]
 fn online_source_metadata() {
-    let src = OnlineSource::new("https://example.invalid/keys", "tok");
+    let src = OnlineSource::new("https://example.test/keys", "tok");
     assert_eq!(src.label(), "online");
     // No host-cert serving today — a no-op empty, no network touched.
     assert!(KeySource::host_certs(&src, None).is_empty());