CONTINUOUS INTERNET TELEMETRY24H DRIFT1,984 material changesacross 1,776 domains · -567 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,378 curated domains not answeringlast probe, steadyERRORS10,873 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT1,984 material changesacross 1,776 domains · -567 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,378 curated domains not answeringlast probe, steadyERRORS10,873 responded with an errorlast probe · 5xx / 404 / 429 / 403

cu.edu

Observed 2026-07-14T03:42:14.261Z (11m ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Also uses1PasswordGoogle Search ConsoleFacebook/Meta
IPv6 · 10 subdomains · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat cu.edu actually stands on - every host below is a signed observation
cu.edu
A / AAAA
23.185.0.32620:12a:8001::32620:12a:8000::3
Cloudflareserves the site
NS
ns9.cu.eduns12.cu.eduns13.cu.eduns11.cu.edu+1 more
cu.eduanswers its DNS
MX
cu-edu.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.cu.edu/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time186 ms
DNS resolutionNOERROR
Redirect chain
https://www.cu.edu/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 23.185.0.3

AAAA 2

  • 2620:12a:8001::3
  • 2620:12a:8000::3

MX 1

  • 10cu-edu.mail.protection.outlook.com

TXT 14

  • apple-domain-verification=BSVxaFpSdcRib9W6
  • cXbeJ4UDJBg+cxayxIvAK7sNlob/rhFmsvARSfdngBDvXzA9gnPBaF1leueKYuSy6wdUw8rtssKey/GXMolhiQ==
  • SFMC-xe9G0OU862W2jbGpqi9eMwAxsIVjt3WpKzQoRxgy
  • 1password-site-verification=HUTGTY3IQ5CGFBFFZSVPDZTH7Y
  • _globalsign-domain-verification=HhVeiSKIzpErKs0wHEAx0o32Z0civrS6plrUOt4M-B
  • v=spf1 redirect=cu.edu.on.autospf.email
  • google-site-verification=TvCMRGZn8yRSf8fjN4KGTGsSIOheS1uAX4kNvtjQBcA
  • MS=35F66365F292BD92898C1F9E92E0B839769891F8
  • facebook-domain-verification=hk6531shxfomy8mnyv13ugtq5ekonl
  • openai-domain-verification=dv-9jI2YpQaR9499Q0ulBsMn5CG

NS 5

  • ns9.cu.edu
  • ns12.cu.edu
  • ns13.cu.edu
  • ns11.cu.edu
  • ns10.cu.edu

SOA 1

  • ns9.cu.edu ecs-infrastructure.cu.edu

TLS Certificates (0)

None.

Subdomains (10)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cu.edu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for cu.edu <a href="https://domaindrift.io/t/cu.edu"> <img src="https://domaindrift.io/badge/cu.edu.svg" width="300" height="64" alt="DomainDrift signed observations for cu.edu"> </a>

Ed25519 Receipt

Receipt ID
a551d0de-6099-4f5f-bbcc-44904d2a34f4
Output Hash
79bbb21f9cec4e0cfdf039b22eeed2e862274a2df8a72507d08045d5d1f40434
Signature
ed25519:f2703f5843d09e971c45c2e42e9b3d36158b88e37a3c9e1d7a9096fd9f4693434c71fb59e29a62e402a77f69911d77ae5e7411e092a513b00f6814f5ca24ad0f
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser