sans.edu

Observed Jul 18, 2026, 13:30 UTC (18h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onIncapsula

Email byProofpoint

Secured byGlobalSign

Also usesGoogle Search Console

1 subdomain · tranco_40k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat sans.edu actually stands on - every host below is a signed observation

sans.edu

A / AAAA

45.60.31.3445.60.103.34

Incapsulaserves the site

violet.ns.cloudflare.comyahir.ns.cloudflare.com

cloudflare.comanswers its DNS

mxa-002c1802.gslb.pphosted.commxb-002c1802.gslb.pphosted.com

Proofpointreceives its email

TLS

imperva.com

GlobalSign nv-saissued its certificate

DNS Records

A 2

45.60.31.34
45.60.103.34

MX 2

10mxa-002c1802.gslb.pphosted.com
10mxb-002c1802.gslb.pphosted.com

TXT 10

82c4sg3vsw4s7kptpvzn6806kjjp3wlr
JI6UZuSsLXHEjD7PIBR1rWcPOqRkKRV2VwWAdhXZnLfbjhmfHHOwjMPizS78hfcgbTtjG1TaPTcdVqzgvUbyaw==
MS=ms72131568
canva-site-verification=yj_t2AOb7g6O61LEAYaAzw
globalsign-domain-verification=4C67BEFB31EB3963BE86CC2DB3922A4C
google-site-verification=dUSOX9p4qG75qf-UfMNmy2Z_aIw_mK-4I5FiWl5Q4co
openai-domain-verification=dv-ud7uHGncEHoxqrKglDjUjQwT
v=spf1 include:sans.edu._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
zapier-domain-verification-challenge=72b6728e-92b4-42ea-ab31-f8dd5d349ae6
v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email

NS 2

violet.ns.cloudflare.com
yahir.ns.cloudflare.com

SOA 1

violet.ns.cloudflare.com dns.cloudflare.com

CAA 17

iodef "mailto:security@sans.org"
issue "amazon.com"
issue "comodoca.com"
issue "digicert.com; cansignhttpexchanges=yes"
issue "globalsign.com"
issue "letsencrypt.org"
issue "pki.goog; cansignhttpexchanges=yes"
issue "sectigo.com"
issue "ssl.com"
issuewild "amazon.com"

TLS Certificates (3)

Common Name	Issuer	Expires
`imperva.com`	C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R46 DV TLS CA 2026 Q2	Wed, 23 Sep 2026 09:28:26 +0000
`GlobalSign Atlas R46 DV TLS CA 2026 Q2`	C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root R46	Fri, 21 Jan 2028 00:00:00 +0000
`GlobalSign Root R46`	2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign	Sun, 18 Mar 2029 00:00:00 +0000

Subdomains (1)

isc.sans.edu

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for sans.edu. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/sans.edu">
  <img src="https://domaindrift.io/badge/sans.edu.svg"
       width="300" height="64" alt="DomainDrift signed observations for sans.edu">
</a>

Ed25519 Receipt

Receipt ID: d04b520e-f51a-4869-a6aa-96e4665be290
Output Hash: 32f6606c78a35fba9f41bb283b6e7aaf376f27bcb2d282111bd1431fd2c20d71
Signature: ed25519:1a668926237492bc6b7fdc447a70d69cb4cf5a6af597060e74cc10f8dbc11d4fc1af94ba2304d9a3dad5d3a58d10cedd705ca91dc12f7090657742cffa8add05
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/sans.edu