CONTINUOUS INTERNET TELEMETRY24H DRIFT154 material changesacross 106 domains · +8 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,351 curated domains not answeringlast probe, steadyERRORS28,433 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,471 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT154 material changesacross 106 domains · +8 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,351 curated domains not answeringlast probe, steadyERRORS28,433 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,471 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

durham.ac.uk

Observed Jul 18, 2026, 12:22 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall
Runs onAmazon
Email byMicrosoft 365
Secured byAmazon
Also usesAtlassianZoomFacebook/MetaGoogle Search ConsoleSlack
1 subdomain · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat durham.ac.uk actually stands on - every host below is a signed observation
durham.ac.uk
A / AAAA
99.83.253.25575.2.69.134
Amazonserves the site
NS
ns1.ja.netinfoblox1.dur.ac.ukinfoblox2.dur.ac.uk
ja.net + dur.ac.ukanswers its DNS
MX
durham-ac-uk.mail.protection.outlook.com
Microsoft 365receives its email
TLS
durham.ac.uk
Amazonissued its certificate

DNS Records

A 2

  • 99.83.253.255
  • 75.2.69.134

MX 1

  • 10durham-ac-uk.mail.protection.outlook.com

TXT 14

  • atlassian-domain-verification=4QR9h/aEVOZU0tYEYtnlvjvIclFSukC88UDWdTOMpQIEOsye71MyWOUXvXM2oQFk
  • v=spf1 include:spf.durham.ac.uk include:spf.protection.outlook.com include:amazonses.com include:customers.clickdimensions.com include:spf.topdesk.net include:mh.blackboard.com ip4:147.154.235.36 ~all
  • jamf-site-verification=IAUrF5iaqbkfxqBhtxkgPA
  • WHTkOaFiNUCAJsWvWfL9N+7aIKeEHABAa++pvw6ZIrX4pe8MxQ8+9axvMmrKdH55EMkbAWhrQd7KkdliVX1U4g==
  • MS=ms44970340
  • QuoVadis=6b7dd13b-ae8f-4640-8e24-f55533d02ea7
  • ZOOM_verify_eRPp25ZETnyjsvfalkyCpg
  • facebook-domain-verification=ivf06haxcqas94ki92zchz5wqxibxu
  • google-site-verification=aQzu_QbDX5n3WB-3tjGoYaKaQVG0aEg8TVO385Ib4AI
  • slack-domain-verification=woDpyKkUAw3ZOOx7naY9evYvtppfP4XVB9WW1VUI

NS 3

  • ns1.ja.net
  • infoblox1.dur.ac.uk
  • infoblox2.dur.ac.uk

SOA 1

  • infoblox2.dur.ac.uk hostmaster.durham.ac.uk

SRV 1

  • xmpp.durham.ac.uk:5269 p0

TLS Certificates (3)

Common NameIssuerExpires
durham.ac.uk C=US, O=Amazon, CN=Amazon RSA 2048 M01 Wed, 30 Dec 2026 23:59:59 +0000
Amazon RSA 2048 M01 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:21:28 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for durham.ac.uk. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for durham.ac.uk <a href="https://domaindrift.io/t/durham.ac.uk"> <img src="https://domaindrift.io/badge/durham.ac.uk.svg" width="300" height="64" alt="DomainDrift signed observations for durham.ac.uk"> </a>

Ed25519 Receipt

Receipt ID
2d64be72-a230-49ff-85f4-ab5282ed550c
Output Hash
8296e13ec58a3cfcbf022d56ee1c75a659bd49f0692bc62b969c50146b4cd372
Signature
ed25519:b5a67e7750af34d50d7d9f9c5f3082ec272b7c7665d0d8498a619f1f949fa75e8c9704e915e1a024d343d38a1ee4d756510b2d319c4a9fef8d647b73e5704e0a
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser