CONTINUOUS INTERNET TELEMETRY24H DRIFT219 material changesacross 144 domains · +73 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,691 curated domains not answering+357 vs yesterdayERRORS30,432 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,598 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT219 material changesacross 144 domains · +73 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,691 curated domains not answering+357 vs yesterdayERRORS30,432 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,598 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

nctc.edu

Observed Jul 18, 2026, 12:19 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onAmazon
Email bySalesforce
Secured byAmazon
Also usesGoogle Search Console
1 subdomain · education_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat nctc.edu actually stands on - every host below is a signed observation
nctc.edu
A / AAAA
75.2.39.172166.117.161.202
Amazonserves the site
NS
ns2.empiricalnetworks.comns1.empiricalnetworks.com
empiricalnetworks.comanswers its DNS
MX
d154403a.ess.barracudanetworks.comd154403b.ess.barracudanetworks.com
Salesforcereceives its email
TLS
www.nctc.edu
Amazonissued its certificate

DNS Records

A 2

  • 75.2.39.172
  • 166.117.161.202

MX 2

  • 10d154403a.ess.barracudanetworks.com
  • 20d154403b.ess.barracudanetworks.com

TXT 16

  • cisco-ci-domain-verification=541a16bcdc9747526724c78aa3f995b170962e6d345e0325dce59126783eee35
  • t7nk5db1ko83k0cbvi05p253v
  • 947642465896672FCB8DB0A83CF700A8801E8772
  • v=spf1 mx a:barracuda.nctc.edu a:hobsonsmail.com include:_spf.salesforce.com include:spf1.formassembly.com include:outboundmail.blackbaud.net -all
  • v=ms1 t=67b09c952a5c4693acafbdafc0d4a6
  • 8ah8nf00orvamhg7qmmfmsi1i0
  • 1s2ct4d4qiqbpfmeb5fktrefdh
  • adobe-idp-site-verification=f90a8cf357ddf4fa256aae998473caf07944b6af135f9e0bdebae4062c9aea6d
  • amazon-business-verification=2461e1d1592d44b5d246e5605edc04380d9285478b8cd26849c8bb5f9ca46c9d
  • u983dkqbh9evmg612fobugh4fd

NS 2

  • ns2.empiricalnetworks.com
  • ns1.empiricalnetworks.com

SOA 1

  • ns1.empiricalnetworks.com.com dns.empiricalnetworks.com

TLS Certificates (3)

Common NameIssuerExpires
www.nctc.edu C=US, O=Amazon, CN=Amazon RSA 2048 M04 Fri, 19 Feb 2027 23:59:59 +0000
Amazon RSA 2048 M04 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:26:35 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nctc.edu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for nctc.edu <a href="https://domaindrift.io/t/nctc.edu"> <img src="https://domaindrift.io/badge/nctc.edu.svg" width="300" height="64" alt="DomainDrift signed observations for nctc.edu"> </a>

Ed25519 Receipt

Receipt ID
7d3e796a-7c2a-4072-a9f3-ae79f00cf360
Output Hash
952a8c18907ebc1237fa5afd45cd25176de1e95fbc642841755b7d465177b832
Signature
ed25519:355f46f16b82d68c77442fc7191d285e1283fa986b994601f8b1ee45048ec24ecfbe1759953520cebd786d759526d48196bb23d78f01e5a6b2f54d2934716e0a
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser