CONTINUOUS INTERNET TELEMETRY24H DRIFT167 material changesacross 120 domains · +21 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,500 curated domains not answering+166 vs yesterdayERRORS29,650 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED87,751 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT167 material changesacross 120 domains · +21 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,500 curated domains not answering+166 vs yesterdayERRORS29,650 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED87,751 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

nic.cyou

Observed Jul 18, 2026, 13:28 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare London
Email byMicrosoft 365
Secured byLet's Encrypt
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat nic.cyou actually stands on - every host below is a signed observation
nic.cyou
A / AAAA
141.193.213.10141.193.213.11
Cloudflare Londonserves the site
NS
a.nic.cyoub.nic.cyouc.nic.cyoud.nic.cyou
nic.cyouanswers its DNS
MX
nic-cyou.mail.protection.outlook.com
Microsoft 365receives its email
TLS
nic.cyou
Let's Encryptissued its certificate

DNS Records

A 2

  • 141.193.213.10
  • 141.193.213.11

MX 1

  • 0nic-cyou.mail.protection.outlook.com

TXT 2

  • v=spf1 include:spf.protection.outlook.com -all
  • v=DMARC1; p=quarantine; fo=1; rua=mailto:webmaster@nic.cyou; ruf=mailto:webmaster@nic.cyou

NS 4

  • a.nic.cyou
  • b.nic.cyou
  • c.nic.cyou
  • d.nic.cyou

SOA 1

  • ns0.centralnic-dns.com hostmaster.centralnic-dns.com

TLS Certificates (4)

Common NameIssuerExpires
nic.cyou C=US, O=Let's Encrypt, CN=YE2 Wed, 30 Sep 2026 13:03:43 +0000
YE2 C=US, O=ISRG, CN=Root YE Sat, 02 Sep 2028 23:59:59 +0000
Root YE C=US, O=Internet Security Research Group, CN=ISRG Root X2 Thu, 02 Sep 2032 23:59:59 +0000
ISRG Root X2 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for nic.cyou. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for nic.cyou <a href="https://domaindrift.io/t/nic.cyou"> <img src="https://domaindrift.io/badge/nic.cyou.svg" width="300" height="64" alt="DomainDrift signed observations for nic.cyou"> </a>

Ed25519 Receipt

Receipt ID
a31309c5-4e90-47de-b4cc-d8a005f098a4
Output Hash
a75e5c612b6164312807f527e6f89d117254aa4ad3b809be7c1cd23080448c38
Signature
ed25519:2d64737edd539d59cc941b6c6964ea9eb499074787b776b0673ce089de3b237405bd6ba5e2479167d2f984212bcdc644741900a69a22f9ade8beb742ef633f0f
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser