CONTINUOUS INTERNET TELEMETRY24H DRIFT1,957 material changesacross 1,764 domains · -121 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination alidns.com · +1 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW1,824 curated domains not answering+698 vs yesterdayERRORS13,053 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED35,152 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,957 material changesacross 1,764 domains · -121 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination alidns.com · +1 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW1,824 curated domains not answering+698 vs yesterdayERRORS13,053 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED35,152 throttled or blocked our scanner429 rate-limit / 403 bot-block

cmu.edu

Observed Jul 18, 2026, 12:06 UTC (19h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCarnegie Mellon University
Email byGoogle Workspace
Secured byInternet2
Also usesZoomDocuSignFacebook/MetaGoogle Search ConsoleAtlassian
98 subdomains · education_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat cmu.edu actually stands on - every host below is a signed observation
cmu.edu
A / AAAA
128.2.42.10
Carnegie Mellon Universityserves the site
NS
NSAUTH1.NET.cmu.eduNSAUTH2.NET.cmu.eduNSAUTH3.NET.cmu.edu
cmu.eduanswers its DNS
MX
ASPMX.L.GOOGLE.COMALT1.ASPMX.L.GOOGLE.COMALT2.ASPMX.L.GOOGLE.COMALT3.ASPMX.L.GOOGLE.COM+1 more
Google Workspacereceives its email
TLS
www.cmu.edu
Internet2issued its certificate

DNS Records

A 1

  • 128.2.42.10

MX 5

  • 1ASPMX.L.GOOGLE.COM
  • 5ALT1.ASPMX.L.GOOGLE.COM
  • 5ALT2.ASPMX.L.GOOGLE.COM
  • 10ALT3.ASPMX.L.GOOGLE.COM
  • 10ALT4.ASPMX.L.GOOGLE.COM

TXT 47

  • MS=ms17583017
  • 00df4000000231leaa
  • e2ma-verification=fu2
  • A8809FFAB54BD9C6F7DFBE92616764D0
  • EECD69320F38F645362247248BD675F4
  • v=spf1 include:_spf.cmu.edu ~all
  • ZOOM_verify_FruZuJfdTeW1OOezpsuIVA
  • apple-domain-verification=yZrPHuazhdH42CPf
  • docusign=048da45a-23c6-4f6b-8f96-6dff4fa6b22b
  • zoho-verification=zb38550127.zmverify.zoho.com

NS 3

  • NSAUTH1.NET.cmu.edu
  • NSAUTH2.NET.cmu.edu
  • NSAUTH3.NET.cmu.edu

SOA 1

  • nsauth-master.net.cmu.edu host-master.andrew.cmu.edu

TLS Certificates (2)

Common NameIssuerExpires
www.cmu.edu C=US, O=Internet2, CN=InCommon RSA Server CA 2 Mon, 18 Jan 2027 23:59:59 +0000
InCommon RSA Server CA 2 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 15 Nov 2032 23:59:59 +0000

Subdomains (98)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cmu.edu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for cmu.edu <a href="https://domaindrift.io/t/cmu.edu"> <img src="https://domaindrift.io/badge/cmu.edu.svg" width="300" height="64" alt="DomainDrift signed observations for cmu.edu"> </a>

Ed25519 Receipt

Receipt ID
19907f8f-6d44-48db-af35-3dcfe3824f57
Output Hash
c41dfa14c26631aab88db412191cbf509464a1ef840120da507e9e5be4df8193
Signature
ed25519:46f981f35e72fa150b193caeb7e4d1ae902a5add29ba180b17cb5dc45bd9a3e06b125c51a74b0f42c2a312c34f9c9fdc31dea3b6e989201ea99d243977ef3e0f
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser