CONTINUOUS INTERNET TELEMETRY24H DRIFT1,502 material changesacross 1,301 domains · +80 vs yesterdayDNS DRIFT18 domains changed DNS providertop destination parity.domains · -3 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination pphosted.comNOW715 curated domains not answeringlast probe, steadyERRORS3,199 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,907 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,502 material changesacross 1,301 domains · +80 vs yesterdayDNS DRIFT18 domains changed DNS providertop destination parity.domains · -3 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination pphosted.comNOW715 curated domains not answeringlast probe, steadyERRORS3,199 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,907 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

ecu.edu

Observed 2026-07-17T12:39:57.127097689+00:00 (13h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onFastly
Email byMicrosoft 365
Secured byLet's Encrypt
Also usesGoogle Search ConsoleDocuSign
IPv6 · 3 subdomains · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ecu.edu actually stands on - every host below is a signed observation
ecu.edu
A / AAAA
23.185.0.22620:12a:8000::22620:12a:8001::2
Fastlyserves the site
NS
sunny.noc.ecu.eduns-02.mcnc.orgns-01.mcnc.org
ecu.edu + mcnc.organswers its DNS
MX
ecu-edu.mail.protection.outlook.com
Microsoft 365receives its email
TLS
ecu.edu
Let's Encryptissued its certificate

DNS Records

A 1

  • 23.185.0.2

AAAA 2

  • 2620:12a:8000::2
  • 2620:12a:8001::2

MX 1

  • 20ecu-edu.mail.protection.outlook.com

TXT 21

  • v=spf1 ip4:150.216.17.174 ip4:150.216.17.201 ip4:150.216.230.56/31 redirect=ecu.edu.hosted.spf-report.com
  • 626c0b4746b46585d5b87ab8b5809e6b3c6b5ba37427727916cce0ffe1a92e82
  • adobe-idp-site-verification=ade9e710c988d781bfef29d6e3626f8b1f2ad4eb1cd0100b09bfbb1fdad677d4
  • 9r6ue3knq02gb81csa82o8oc6s
  • nbWNdZZ+KVv1mCpTxxpWJ84gK16SnCDbb5Sj+lKKXdlhH2VlW1kHA/FiWTnKv55yypqEX1l3Ox2ydbiOyac+4Q==
  • google-site-verification=Wi3-0dh62L9et6yNDsr4aAX3Z57yqRvIsEWUcIb_iXc
  • docusign=00db58f1-6cd9-42b9-94ba-e3b40a512de7
  • apple-domain-verification=cpelCcL0dsbNMal0
  • docusign=b6e0326f-329a-4c37-a55e-ebfa8cc112fc
  • e2ma-verification=ef0fb

NS 3

  • sunny.noc.ecu.edu
  • ns-02.mcnc.org
  • ns-01.mcnc.org

SOA 1

  • ns0-int.ecu.edu frabonir.ecu.edu

SRV 3

  • vcsxc.ecu.edu:5060 p10
  • vcsxc.ecu.edu:5061 p10
  • lcsx13.ecu.edu:5269 p10

TLS Certificates (3)

Common NameIssuerExpires
ecu.edu C=US, O=Let's Encrypt, CN=YR2 Sat, 29 Aug 2026 12:21:03 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ecu.edu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ecu.edu <a href="https://domaindrift.io/t/ecu.edu"> <img src="https://domaindrift.io/badge/ecu.edu.svg" width="300" height="64" alt="DomainDrift signed observations for ecu.edu"> </a>

Ed25519 Receipt

Receipt ID
bd839ba8-81f2-4013-9b35-c132b69c43b3
Output Hash
ea4c78c342574d918b4e83755a82a494f3fc2cb086557b4e7b71ab6fc8e7b3ac
Signature
ed25519:0b784421766c17ecc7500882d1ea2a51c700ae9b5c1f213968bc3a454a64466d0e627d2251712c0057700b80e696ee21a371ae3d7e3daa2dade78db46e26140b
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser