CONTINUOUS INTERNET TELEMETRY24H DRIFT2,366 material changesacross 2,133 domains · -1,032 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination cloudflare.com · -12 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT5 domains switched issuing CA24h · -2 vs yesterdayNOW3,324 curated domains not answering-6,394 vs yesterdayERRORS10,911 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,366 material changesacross 2,133 domains · -1,032 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination cloudflare.com · -12 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT5 domains switched issuing CA24h · -2 vs yesterdayNOW3,324 curated domains not answering-6,394 vs yesterdayERRORS10,911 responded with an errorlast probe · 5xx / 404 / 429 / 403

up.edu

Observed 2026-07-13T18:02:37.200Z (3h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Also usesGoogle Search ConsoleFacebook/MetaDocuSign
6 subdomains · education_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat up.edu actually stands on - every host below is a signed observation
up.edu
A / AAAA
64.251.254.18
Cloudflareserves the site
NS
kate.ns.cloudflare.comlee.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
up-edu.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

redirect Redirecting (3xx) 302 → https://www.up.edu/
HTTP status302
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time515 ms
DNS resolutionNOERROR
Redirect chain
https://www.up.edu/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 64.251.254.18

MX 1

  • 0up-edu.mail.protection.outlook.com

TXT 13

  • CQA7ZTWYZJL7IRSQWPQATOU2EW0YQZYSC2ALIW63H
  • e2ma-verification=mrmfb
  • yahoo-verification-key=j06DKrBT+pSAaRM1D3Dmx6CaFrGJKWmjv+dvqwCsIRA=
  • google-site-verification=EQmJIFN1OQVhwxYOX4vjpzxNML5BpPTD74ZgnEuH5pk
  • sophos-domain-verification=a13ca963bbfbfae820ffaaa7abc38bb1fce8f340dd06eef68bb388f381f8162b
  • google-site-verification=bEssn6a0rec7nrbjlEoVhnrNLJlRW1MjPf-veGB7OvI
  • apple-domain-verification=FCIZcmXt8poJkrik
  • facebook-domain-verification=zxnym8g977rmh6mscjbqe6l06tlpqj
  • canva-site-verification=seMcUdLDPfjd8L1nKEYPjw
  • v=spf1 mx include:spf.protection.outlook.com ip4:64.251.254.238 ip4:64.251.254.239 include:e2ma.net include:spf-na.exlibrisgroup.com ip4:12.228.6.215 a:relay01.evenue.net include:spf.wbm.ai ~all

NS 2

  • kate.ns.cloudflare.com
  • lee.ns.cloudflare.com

SOA 1

  • kate.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (6)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for up.edu. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for up.edu <a href="https://domaindrift.io/t/up.edu"> <img src="https://domaindrift.io/badge/up.edu.svg" width="300" height="64" alt="DomainDrift signed observations for up.edu"> </a>

Ed25519 Receipt

Receipt ID
b9bc7846-f7d1-4502-ae7a-16ecd0f32880
Output Hash
345361e5d7711de4f6c6ea6371ec23fb7b96362df67682bfca634b2e3568873e
Signature
ed25519:6229211a80897a0d6217a2a210032aa79d9ed0f898d431b44da7548b327f80ec7501aabb83e0c92ebe8666e2034402c3361132a7eb84c53a350581275da5b708
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser