CONTINUOUS INTERNET TELEMETRY24H DRIFT1,719 material changesacross 1,519 domains · +297 vs yesterdayDNS DRIFT6 domains changed DNS providertop destination parity.domains · -15 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination outlook.com · -2 vs yesterdayNOW922 curated domains not answering+212 vs yesterdayERRORS4,293 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,849 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,719 material changesacross 1,519 domains · +297 vs yesterdayDNS DRIFT6 domains changed DNS providertop destination parity.domains · -15 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination outlook.com · -2 vs yesterdayNOW922 curated domains not answering+212 vs yesterdayERRORS4,293 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,849 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

ou.edu

Observed 2026-07-17T21:47:19.948Z (9h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesGoogle Search ConsoleDocuSignZoom
15 subdomains · education_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ou.edu actually stands on - every host below is a signed observation
ou.edu
A / AAAA
156.110.247.18
Cloudflareserves the site
NS
ns-472.awsdns-59.comns-1284.awsdns-32.orgns-1598.awsdns-07.co.ukns-937.awsdns-53.net
awsdns-59.com + awsdns-32.org + moreanswers its DNS
MX
mxa-00272701.gslb.pphosted.commxb-00272701.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.ou.edu/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time345 ms
DNS resolutionNOERROR
Redirect chain
https://www.ou.edu/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 156.110.247.18

MX 2

  • 10mxa-00272701.gslb.pphosted.com
  • 10mxb-00272701.gslb.pphosted.com

TXT 39

  • cisco-ci-domain-verification=2e8593a1e97e6ee3e9e53c4192da8d2fc3c38fff45292480c92fed85bb98f451
  • 00D5f000001yseS=1TBUw00000005hF
  • 00Dd0000000h1IL=1TBRi0000000SsL
  • 208.75.123.0/24
  • 00D460000015hop=1TBS6000000043d
  • D1FA33B743B20CDDDBB9AF8624EE2355
  • google-site-verification=CwnZt6h1EGhM5plVrZK_z1eon4GyVpPVIKax5cpcFd4
  • 00D5e000001MWEN=1TBVV00000004Jl
  • docusign=8de025f0-7002-4f33-81c9-b99876e9dd6f
  • adobe-idp-site-verification=6ba3e6ad-d322-435f-b2ea-efa73549fd04

NS 4

  • ns-472.awsdns-59.com
  • ns-1284.awsdns-32.org
  • ns-1598.awsdns-07.co.uk
  • ns-937.awsdns-53.net

SOA 1

  • ns-1598.awsdns-07.co.uk awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (15)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ou.edu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ou.edu <a href="https://domaindrift.io/t/ou.edu"> <img src="https://domaindrift.io/badge/ou.edu.svg" width="300" height="64" alt="DomainDrift signed observations for ou.edu"> </a>

Ed25519 Receipt

Receipt ID
3b31cee4-a676-4409-9030-baf4b07a1f1a
Output Hash
6ddfbdf311dea4ded7b185b549f2f30acb7ad4bb58d98736f932b4d48b80b32d
Signature
ed25519:962638cd8594aa46236a68e35ada3c8507fb20e7406826dfe5fbb6e35396c17a3fb2cae520f19b23b04bbce1d087b27acac6043c6a79c440f6c1c31fadc1cf04
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser