CONTINUOUS INTERNET TELEMETRY24H DRIFT2,932 material changesacross 2,580 domains · -466 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination h-email.net · -4 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,958 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,932 material changesacross 2,580 domains · -466 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · -5 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination h-email.net · -4 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,958 responded with an errorlast probe · 5xx / 404 / 429 / 403

brightspace.com

Observed 2026-07-12T21:26:42.962Z (13h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Registered withGoDaddy.com, LLC
Also usesGoogle Search Console
6 subdomains · tranco_5k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat brightspace.com actually stands on - every host below is a signed observation
brightspace.com
A / AAAA
99.79.130.17152.60.246.107
Cloudflareserves the site
NS
ns-108.awsdns-13.comns-905.awsdns-49.netns-1559.awsdns-02.co.ukns-1133.awsdns-13.org
awsdns-13.com + awsdns-49.net + moreanswers its DNS
MX
brightspace-com.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.d2l.com:443/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time282 ms
DNS resolutionNOERROR
Redirect chain
https://www.d2l.com:443/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 99.79.130.171
  • 52.60.246.107

MX 1

  • 0brightspace-com.mail.protection.outlook.com

TXT 7

  • 00d6100000080toeaq
  • v=spf1 include:spf.protection.outlook.com include:_netblocks.eloqua.com include:a._spf.brightspace.com include:_spf.salesforce.com ~all
  • google-site-verification=mFagkdI0m2JjG0M5ADkX_2HBCNE9e8qactTXuaGpS0s
  • MS=ms45773918
  • google-site-verification=C6hhTSoubfzpbqdFjzjE_v9LKyGja5_LF7FT_Dcql1E
  • v=DMARC1; p=reject; rua=mailto:reports@dmarc.brightspace.com; fo=1; adkim=r; aspf=r
  • v=DNSSEC1; (detected)

NS 4

  • ns-108.awsdns-13.com
  • ns-905.awsdns-49.net
  • ns-1559.awsdns-02.co.uk
  • ns-1133.awsdns-13.org

SOA 1

  • ns-108.awsdns-13.com awsdns-hostmaster.amazon.com

CAA 4

  • iodef mailto:soeplatform@d2l.com
  • issue letsencrypt.org
  • issue digicert.com
  • issue amazon.com

TLS Certificates (0)

None.

Subdomains (6)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for brightspace.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for brightspace.com <a href="https://domaindrift.io/t/brightspace.com"> <img src="https://domaindrift.io/badge/brightspace.com.svg" width="300" height="64" alt="DomainDrift signed observations for brightspace.com"> </a>

Ed25519 Receipt

Receipt ID
96e2967e-5a2e-4f9e-9b54-5b7b17d42494
Output Hash
77a0b90094f50befb62517652ae48b9c15fe364813d338ca2da148135c479064
Signature
ed25519:16b9b400615d18f4a35bc4001973348debe273c6b59663f7e3c458088dbf09cb44788ed925c8de2ac36bf8044ef8a0994626b80a518d104fa71681aa774f5e02
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser