CONTINUOUS INTERNET TELEMETRY24H DRIFT728 material changesacross 255 domains · last 24h · -79 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination domaincontrol.com

northwestern.edu

Observed Jul 24, 2026, 17:44 UTC (9h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onNorthwestern University
Email byMailchimp
Secured byInternet2
Also usesDocuSignAtlassianMiro1PasswordGoogle Search ConsoleFacebook/Meta
IPv6 · 93 subdomains · education_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat northwestern.edu actually stands on - every host below is a signed observation
northwestern.edu
A / AAAA
129.105.136.482620:10d:2060:1130::11
Northwestern Universityserves the site
NS
cicada.northwestern.eduaccuvax.northwestern.edu
northwestern.eduanswers its DNS
MX
chcspprf10.ads.northwestern.eduevcspprf11.ads.northwestern.eduevcspprf10.ads.northwestern.eduevcspprf12.ads.northwestern.edu+2 more
Mailchimpreceives its email
TLS
it.northwestern.edu
Internet2issued its certificate

DNS Records

A 1

  • 129.105.136.48

AAAA 1

  • 2620:10d:2060:1130::11

MX 6

  • 10chcspprf10.ads.northwestern.edu
  • 10evcspprf11.ads.northwestern.edu
  • 10evcspprf10.ads.northwestern.edu
  • 10evcspprf12.ads.northwestern.edu
  • 10chcspprf12.ads.northwestern.edu
  • 10chcspprf11.ads.northwestern.edu

TXT 64

  • adobe-idp-site-verification=b6817dcc6d57aafd2993af9737558668d132a4f6c2be7bc6aa0513be91c29182
  • amazonses:PD1svM8Ux6TaXc7Gzh7bEKYK8ki2nt1gzZx0bKpaJPg=
  • amazonses:0G1rTZw4h/ZJ8pnm67+KKxSL41IP0Ok7GZUZ7IF/kZc=
  • amazonses:eKCoAQOpP+sWBz54nKIZTfjnWJSS7Nrflp9ziIraP1M=
  • amazonses:7r2Zk09xSsTpfnWKtxmYJqXsJOGSGsquQGrckxhTLUI=
  • amazonses:8oZtwYE9ip7ShHqAmkO/bCOQbr1zqwQ9D3DcOdg6eMg=
  • pardot_173702_*=aa8773dcb6a126024aa0b4c2fbdcd16f5ba0767a9bead5ce03e6cdfd04494bc1
  • heroku-domain-verification=eaplc3aun11qelkdtsldjhphtxd8e9lxgynivu8r7ou
  • heroku-domain-verification=lkzqcjtywk9y15oqajjfjhfsj3yzhttfsnntflhamg
  • e2ma-verification=mqrbb

NS 2

  • cicada.northwestern.edu
  • accuvax.northwestern.edu

SOA 1

  • infoblox.ittns.northwestern.edu hostmaster.northwestern.edu

SRV 4

  • chvspexpye04.ci.northwestern.edu:5060 p0
  • evvspexpye03.ci.northwestern.edu:5060 p0
  • chvspexpye04.ci.northwestern.edu:5061 p0
  • evvspexpye03.ci.northwestern.edu:5061 p0

TLS Certificates (4)

Common NameIssuerExpires
it.northwestern.edu C=US, O=Internet2, CN=InCommon RSA Server CA 2 Fri, 18 Sep 2026 23:59:59 +0000
InCommon RSA Server CA 2 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 15 Nov 2032 23:59:59 +0000
USERTrust RSA Certification Authority C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Sun, 31 Dec 2028 23:59:59 +0000
AAA Certificate Services C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Sun, 31 Dec 2028 23:59:59 +0000

Subdomains (93)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for northwestern.edu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for northwestern.edu <a href="https://domaindrift.io/t/northwestern.edu"> <img src="https://domaindrift.io/badge/northwestern.edu.svg" width="300" height="64" alt="DomainDrift signed observations for northwestern.edu"> </a>

Ed25519 Receipt

Receipt ID
rcpt_03f96e91bd1d47fa
Output Hash
26a0aed9837d79e5e7ff6b68d3c983445722bc839d1e6922231fc53a5c089a43
Signature
ed25519:36696b3c40ec847e14eb5c4d5760e0e56a21d22af8e1737d98bd8301b128babcd9ece8e35bd1a426296a2869b9c89388c2cd532ce7bd19d5521d1da6ac3aac01
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser