CONTINUOUS INTERNET TELEMETRY24H DRIFT1,912 material changesacross 1,731 domains · -639 vs yesterdayDNS DRIFT13 domains changed DNS providertop destination afternic.com · -3 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,404 curated domains not answeringlast probe, steadyERRORS10,891 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT1,912 material changesacross 1,731 domains · -639 vs yesterdayDNS DRIFT13 domains changed DNS providertop destination afternic.com · -3 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,404 curated domains not answeringlast probe, steadyERRORS10,891 responded with an errorlast probe · 5xx / 404 / 429 / 403

unc.edu

Observed 2026-07-14T02:21:59.064Z (13h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Also usesAtlassianGoogle Search Console
IPv6 · 16 subdomains · education_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat unc.edu actually stands on - every host below is a signed observation
unc.edu
A / AAAA
23.185.0.42620:12a:8000::42620:12a:8001::4
Cloudflareserves the site
NS
ns-02.mcnc.orgns2.unc.eduns.unc.eduns-01.mcnc.org
mcnc.org + unc.eduanswers its DNS
MX
unc-edu.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.unc.edu/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time247 ms
DNS resolutionNOERROR
Redirect chain
https://www.unc.edu/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 23.185.0.4

AAAA 2

  • 2620:12a:8000::4
  • 2620:12a:8001::4

MX 1

  • 0unc-edu.mail.protection.outlook.com

TXT 13

  • 0ed1fe018a73a8ce4306844bdfac2a10c87b4ac950
  • jamf-site-verification=Fq8fepJhW6_7w8NG8JYwhA
  • adobe-idp-site-verification=88050a1e-afb6-413e-9eed-8bfc2844c076
  • atlassian-domain-verification=B95aBgJ5XQdjoCo0p56yxZjvXHQfxcZWsgsq9qEx2qg5CZuSVhUzS7TIRYFLUEhs
  • 560CD24D9F9C5FF73216103F075E399D
  • FEEA50E6E27F7DCA5619A826EBC71601
  • _globalsign-domain-verification=RsE9z_LV7XU284qNCorJt_3L3YeV22GJTenam2LO5w
  • v=spf1 ip4:152.2.79.86 ip4:152.2.79.87 ip4:152.2.79.94 include:spf.protection.outlook.com -all
  • LKTxXZvEy4KwMa3icGL7Yw86YXgQyAM5TzFW1T/NV43jzf93KIN8yCEVR/giXwKPJH2B4uEDAHdsw24So13qjw==
  • fastly-domain-delegation-MC7P96kKGMnuDw7zbjoQ-08/27/2020

NS 4

  • ns-02.mcnc.org
  • ns2.unc.edu
  • ns.unc.edu
  • ns-01.mcnc.org

SOA 1

  • ib-hm.net.unc.edu hostmaster.unc.edu

TLS Certificates (0)

None.

Subdomains (16)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for unc.edu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for unc.edu <a href="https://domaindrift.io/t/unc.edu"> <img src="https://domaindrift.io/badge/unc.edu.svg" width="300" height="64" alt="DomainDrift signed observations for unc.edu"> </a>

Ed25519 Receipt

Receipt ID
c88573d9-aa14-4886-a52d-604e200df9ff
Output Hash
c569baf80ab04a7552a564b2b4ecae3b2ba8aa2c0eae029c2dd38a1d7cf7d7df
Signature
ed25519:f0958ec03f88ffce1967127a0032d3d8401a8b36aac23bd364c3af79264023518ecaf76fdc8c85d23533f83ec4a8413bef1b9c869427fc2de577e6851d087906
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser