tiaa.org

Observed Jul 21, 2026, 19:12 UTC (17h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Not responding

Email byMicrosoft 365

Secured bySectigo

Also usesGoogle Search ConsoleZoomDocuSignDockerAtlassianFacebook/Meta

fortune_500

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat tiaa.org actually stands on - every host below is a signed observation

tiaa.org

A / AAAA

143.165.158.62143.165.40.43

unattributedserves the site

a12-64.akam.neta1-88.akam.neta5-66.akam.neta10-67.akam.net+5 more

akam.net + tiaa-cref.organswers its DNS

tiaa-org.mail.protection.outlook.com

Microsoft 365receives its email

TLS

www-302-infra.tiaa-cref.org

Sectigo Limitedissued its certificate

DNS Records

A 2

143.165.158.62
143.165.40.43

MX 1

10tiaa-org.mail.protection.outlook.com

TXT 46

mongodb-site-verification=Q5CrBy6Vq7KHSgVoAuoqJ7khajhmjuyT
onetrust-domain-verification=416e7f4b3c8049b7b818577b148cf94e
d8qd2bhvmkn0x6q1x9y355pzpmcv93cz
b8gfpx535wjft2g37d7g018nym1cyj89
google-site-verification=_RMO_m1AfZavRCmmkOssC_x7aM13eCPU5g5wf0sI528
y4fj9nzrkty96h9yrlkpm8g99bvpt19c
7Y7U56xDiGzSRBQpzouAQfJDlP3Sb/59wqdIG1cNjddf0XzHjv3WXrF9vLsZgydf+pdYOKxE7oeuDrDBuIddbQ==
apple-domain-verification=jxywB8IIqnpE8hXt
pdnlw9cq6szrt6fydqzp4zjjb1yqymhp
g7nst4g0rrs3vl91b9j1kys4zzs6cvxy

NS 9

a12-64.akam.net
a1-88.akam.net
a5-66.akam.net
a10-67.akam.net
a9-67.akam.net
denpdaieblx01.lan.tiaa-cref.org
chapdaieblx01.lan.tiaa-cref.org
chapdbieblx01.lan.tiaa-cref.org
a28-65.akam.net

SOA 1

denpdaieblx01.lan.tiaa-cref.org eneis.tiaa-cref.org

SRV 3

vcse.tiaa-cref.org:5060 p0
vcse.tiaa-cref.org:5061 p0
nxpfs.ucfederationcloud.com:5269 p0

CAA 2

issue "digicert.com"
issue "sectigo.com"

TLS Certificates (5)

Common Name	Issuer	Expires
`www-302-infra.tiaa-cref.org`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36	Sat, 12 Dec 2026 23:59:59 +0000
`Sectigo Public Server Authentication CA OV R36`	C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46	Fri, 21 Mar 2036 23:59:59 +0000
`Sectigo Public Server Authentication Root R46`	C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority	Mon, 18 Jan 2038 23:59:59 +0000
`USERTrust RSA Certification Authority`	C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services	Sun, 31 Dec 2028 23:59:59 +0000
`AAA Certificate Services`	C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services	Sun, 31 Dec 2028 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for tiaa.org. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/tiaa.org">
  <img src="https://domaindrift.io/badge/tiaa.org.svg"
       width="300" height="64" alt="DomainDrift signed observations for tiaa.org">
</a>

Ed25519 Receipt

Receipt ID: rcpt_3a21ff21b590e1f9
Output Hash: 9cc529deb8b8ce2de6ba99586d2937aaf923ba403def972122a816f571c8a93b
Signature: ed25519:3f7a7717d853d51a69b09c5bf1e5093e36058597e6ffe516ee2ca063b1e8c65dae227b983dff8e9eec4799b366ce1caea467c8c7b476ac8c72e85bb2edcf1103
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/tiaa.org