CONTINUOUS INTERNET TELEMETRY24H DRIFT2,859 material changesacross 2,515 domains · -539 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination cloudflare.com · -6 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination reyrey.com · -2 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,307 curated domains not answering-6,411 vs yesterdayERRORS10,966 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,859 material changesacross 2,515 domains · -539 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination cloudflare.com · -6 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination reyrey.com · -2 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,307 curated domains not answering-6,411 vs yesterdayERRORS10,966 responded with an errorlast probe · 5xx / 404 / 429 / 403

rit.edu

Observed 2026-07-12T17:22:30.734Z (16h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email bySalesforce
Also usesAtlassian
IPv6 · 24 subdomains · education_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat rit.edu actually stands on - every host below is a signed observation
rit.edu
A / AAAA
129.21.1.402620:8d:8000:0:aba:ca:daba:217
Cloudflareserves the site
NS
ns1a.rit.eduns2a.rit.eduaccuvax.northwestern.edu
rit.edu + northwestern.eduanswers its DNS
MX
mx03d-in01r.rit.edumx03g-in01r.rit.edumx03c-in01r.rit.edumx03t-in01r.rit.edu+5 more
Salesforcereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.rit.edu/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time638 ms
DNS resolutionNOERROR
Redirect chain
https://www.rit.edu/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 129.21.1.40

AAAA 1

  • 2620:8d:8000:0:aba:ca:daba:217

MX 9

  • 5mx03d-in01r.rit.edu
  • 5mx03g-in01r.rit.edu
  • 5mx03c-in01r.rit.edu
  • 5mx03t-in01r.rit.edu
  • 5mx03e-in01r.rit.edu
  • 5mx03a-in01r.rit.edu
  • 5mx03f-in01r.rit.edu
  • 5mx03b-in01r.rit.edu
  • 5mx03h-in01r.rit.edu

TXT 7

  • hpe-greenlake-domain-verification=4b563844396f43496e68564b446f7776694a70645159306b6a534c6344355234
  • 6C616FF21D7906B7DC2CAC02FE6155F4
  • atlassian-domain-verification=NYxaPJDKpS55ZcaM43zoIiTTcT16jWHscH8MZpNTXzX0LCPs7nz8YwF6RyNtDhDR
  • v=spf1 mx ip4:129.21.10.0/25 ip4:129.21.10.128/25 ip4:104.47.0.0/17 ip4:129.21.10.0/24 ip4:129.21.10.0/25 ip4:129.21.10.128/25 ip4:129.21.128.0/24 ip4:129.21.13.192/26 ip4:129.21.14.0/24 ip4:129.21.15.0/26 ip4:129.21.15.128/25 ip4:129.21.150.0/23 ip4:129.21.153.0/24 ip4:129.21.154.0/24 ip4:52.60.116.9 ip4:52.60.157.49 ip4:52.62.198.211 ip4:52.70.104.58 ip4:64.72.147.0/24 exists:%{i}._spf.mta.salesforce.com ip4:129.21.16.192/26 ip4:129.21.161.0/24 ip4:129.21.162.0/23 ip4:129.21.165.0/24 ip4:129.21.166.0/23 ip4:129.21.168.0/21 ip4:129.21.17.0/24 ip4:129.21.176.0/21 ip4:129.21.18.128/25 ip4:129.21.18.64/26 ip4:129.21.184.0/25 ip4:129.21.185.0/24 ip4:129.21.186.0/23 ip4:129.21.188.0/23 ip4:129.21.19.0/24 ip4:129.21.190.0/24 ip4:129.21.192.0/20 ip4:129.21.2.128/28 ip4:129.21.2.192/27 ip4:129.21.20.0/24 ip4:129.21.208.0/23 ip4:129.21.21.0/25 ip4:129.21.21.128/27 ip4:129.21.210.0/24 ip4:129.21.212.0/23 ip4:129.21.214.0/25 ip4:129.21.216.128/25 ip4:129.21.217.128/25 ip4:129.21.218.0/25 ip4:129.21.219.0/24 ip4:129.21....[truncated]
  • anthropic-domain-verification-2qymnt=MTntd4DgL6YyEaHbJUf5FKGqk
  • openai-domain-verification=dv-aeuaxT88QLFaKvJCzy4WAoHu
  • v=DMARC1; p=quarantine; sp=quarantine; fo=1; rua=mailto:dmarc@rit.edu; ruf=mailto:dmarcf@rit.edu; adkim=r; aspf=r; pct=100;

NS 3

  • ns1a.rit.edu
  • ns2a.rit.edu
  • accuvax.northwestern.edu

SOA 1

  • ns1a.rit.edu root.rit.edu

TLS Certificates (0)

None.

Subdomains (24)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for rit.edu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for rit.edu <a href="https://domaindrift.io/t/rit.edu"> <img src="https://domaindrift.io/badge/rit.edu.svg" width="300" height="64" alt="DomainDrift signed observations for rit.edu"> </a>

Ed25519 Receipt

Receipt ID
8a73e709-6ace-40ea-a1a8-340588185f1f
Output Hash
65e36af97c7df881944356855b399aba7869dda0682621eb1f3e801489b2f359
Signature
ed25519:99ffa2a6794a5421c8f331f6b3c9d1d2520e695f03e89d77c9ddd79d3d09c31278d5b04a4a981cc594ab7723cd81e1c9cc85aa5fb622d46dc22505f5a71af407
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser