CONTINUOUS INTERNET TELEMETRY24H DRIFT7,423 material changesacross 7,020 domains · last 24h · -2,992 vs yesterdayDNS DRIFT459 domains changed DNS providertop destination cloudflare.com · -200 vs yesterdayEMAIL DRIFT108 domains switched email providertop destination google.com · -59 vs yesterdayCERT DRIFT155 domains switched issuing CA24h · -64 vs yesterdayNOW496 curated domains not reachable-207 vs yesterdaySITE ERRORS17,413 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,759 sites429 rate-limit / 403 bot-block, a posture signal

extension.harvard.edu

Observed Jul 24, 2026, 02:50 UTC (4h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onFastly
Email byProofpoint
Secured byLet's Encrypt
Also usesGoogle Search Console
IPv6 · 3 subdomains · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat extension.harvard.edu actually stands on - every host below is a signed observation
extension.harvard.edu
A / AAAA
23.185.0.12620:12a:8000::12620:12a:8001::1
Fastlyserves the site
NS
a10-66.akam.neta7-65.akam.neta6-66.akam.neta16-64.akam.net+2 more
akam.netanswers its DNS
MX
mx0b-00171101.pphosted.commx0a-00171101.pphosted.com
Proofpointreceives its email
TLS
alumni.extension.harvard.edu
Let's Encryptissued its certificate

DNS Records

A 1

  • 23.185.0.1

AAAA 2

  • 2620:12a:8000::1
  • 2620:12a:8001::1

MX 2

  • 100mx0b-00171101.pphosted.com
  • 100mx0a-00171101.pphosted.com

TXT 8

  • google-site-verification=tzmjMGjzKQVBgEZzniAHdkyyh7E3bwl6wAgf0kIfTQM
  • openai-domain-verification=dv-VUo8zaxeVwykPdyNqwwDoWXi
  • v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
  • google-site-verification=y1KmMSc7jtK8BUkTSVvhvf4LqRL3OPz3Zy5YKr-VZBE
  • anthropic-domain-verification-yma60b=iIYn7CygYmxD9f8ynJOmz5Z5V
  • google-site-verification=KTzOUo7gPXWp3jvnDRB5lCXzpGx2Sh7Osjm_5Pvixa0
  • v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email
  • v=BIMI1; l=https://extension.harvard.edu/wp-content/uploads/sites/8/2024/01/EXT_Shield_Bimi.svg

NS 6

  • a10-66.akam.net
  • a7-65.akam.net
  • a6-66.akam.net
  • a16-64.akam.net
  • a1-171.akam.net
  • a11-67.akam.net

SOA 1

  • a1-171.akam.net netmanager.harvard.edu

SRV 2

  • dcedecode2.dce.harvard.edu:5222 p10
  • dcedecode2.dce.harvard.edu:5269 p10

TLS Certificates (3)

Common NameIssuerExpires
alumni.extension.harvard.edu C=US, O=Let's Encrypt, CN=YR1 Fri, 11 Sep 2026 15:20:28 +0000
YR1 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for extension.harvard.edu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for extension.harvard.edu <a href="https://domaindrift.io/t/extension.harvard.edu"> <img src="https://domaindrift.io/badge/extension.harvard.edu.svg" width="300" height="64" alt="DomainDrift signed observations for extension.harvard.edu"> </a>

Ed25519 Receipt

Receipt ID
rcpt_8fa6c815a585511e
Output Hash
be41c950e7cd996db44242db895880d833238077e53f13f75743acf628b59c67
Signature
ed25519:8e566d0de893d557f672e0d5c474fd31d0a9cc804ccc26685728876271c534611d5e66f30fffa0f9657dd555a49ef2ca7d4c97385392b4a173a24da1fdfe980d
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser