CONTINUOUS INTERNET TELEMETRY24H DRIFT3,174 material changesacross 2,745 domains · -224 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,319 curated domains not answering-6,399 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,174 material changesacross 2,745 domains · -224 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,319 curated domains not answering-6,399 vs yesterdayERRORS10,957 responded with an errorlast probe · 5xx / 404 / 429 / 403

gu.se

Observed 2026-07-13T01:32:48.180Z (3h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Also usesAtlassianGoogle Search ConsoleFacebook/MetaMiro
7 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat gu.se actually stands on - every host below is a signed observation
gu.se
A / AAAA
130.241.39.203
Cloudflareserves the site
NS
ns2.chalmers.sens1.net.gu.sesunic.sunet.sens2.net.gu.se
chalmers.se + gu.se + moreanswers its DNS
MX
gu-se.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.gu.se/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time926 ms
DNS resolutionNOERROR
Redirect chain
https://www.gu.se/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 130.241.39.203

MX 1

  • 10gu-se.mail.protection.outlook.com

TXT 20

  • mandrill_verify.oCFTiTf4NIqZmUDkSDW1vA
  • atlassian-domain-verification=6Z6mb/CK6tL0szYjaJhRwpuBMgurE2vRjNw7AHfrowHpyFCT6aU25yAaEPEC7a3T
  • MS=ms77028744
  • google-site-verification=d51zezRWehjY_tfUfKR25u-IJsh9ri5QiK88i73cpBw
  • mentimeter-5a7c3cdb-74b0-43f5-bad0-f7bc1cd02a8f
  • v=spf1 ip4:130.235.56.200 ip4:79.136.98.172 ip4:91.123.56.128 ip4:193.26.30.0/25 ip4:217.28.204.8 ip4:195.10.211.16 ip4:193.12.108.68 ip4:213.157.70.73 ip4:213.157.70.75 ip4:88.151.78.132 ip4:130.241.135.107 ip4:130.241.135.110 include:spf.protection.outlook.com ip4:130.235.56.199 ip4:130.235.56.200 ip4:130.235.56.201 ip4:130.235.56.202 ip6:2001:6b0:16:1:5ee:bad:c0de:2200 ip6:2001:6b0:d:708:10:240:8:46 ip6:2001:6b0:d:708:10:240:8:48 ip6:2001:6b0:16:1:5ee:bad:c0de:2199 ip6:2001:6b0:16:1:5ee:bad:c0de:2201 ip6:2001:6b0:16:1:5ee:bad:c0de:2202 ip4:130.235.62.19 ip4:130.235.62.13 ip4:130.235.56.203 ip4:88.151.73.29 ip4:77.237.55.139 ip4:52.232.27.151 include:_spf.anpdm.com include:spf.hostingconnection.eu ip4:130.241.170.85 ip4:130.241.170.86 ip4:23.90.119.90 ip4:23.90.119.91 ip4:23.90.117.190 ip4:23.90.117.191 include:mail.webropolsurveys.com include:spf.mandrillapp.com include:spf.gansend.com include:_spf.ungapped.io include:spf.multinet.com ~all
  • mandrill_verify._CuH-xX7ZMOZE2ysN8mEjg
  • adobe-idp-site-verification=c2a0682bad454fc9abdaac816101ff94104948d70179e0bba9cc94fa464564cf
  • facebook-domain-verification=y5y71rnwe34fx1x2rj5w9jjdin0me8
  • facebook-domain-verification=nmt239dvy5mjzpu24ngkelqe9ww6r4

NS 4

  • ns2.chalmers.se
  • ns1.net.gu.se
  • sunic.sunet.se
  • ns2.net.gu.se

SOA 1

  • ns1.net.gu.se guns.gu.se

CAA 6

  • issue pki.goog
  • issue godaddy.com
  • issue sectigo.com
  • issue harica.gr
  • issue digicert.com
  • issue letsencrypt.org

TLS Certificates (0)

None.

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for gu.se. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for gu.se <a href="https://domaindrift.io/t/gu.se"> <img src="https://domaindrift.io/badge/gu.se.svg" width="300" height="64" alt="DomainDrift signed observations for gu.se"> </a>

Ed25519 Receipt

Receipt ID
52269a99-902b-4170-bc8e-487f15886b2b
Output Hash
50bcffe2d6436ed3fd3b2df3762dd3515ce1bfc397b9014b3c9d5e89c27fd727
Signature
ed25519:779fbd675b82f33c39aa2f334db9211cdee4975472f71d39f1da24ec80a0f23fe368339728d6b527b8bf97814626b3d3bd3532826b6046bcd89196a83a887708
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser