CONTINUOUS INTERNET TELEMETRY24H DRIFT889 material changesacross 797 domains · +435 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination parity.domains · +19 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW2,640 curated domains not answering+425 vs yesterdayERRORS10,211 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,799 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT889 material changesacross 797 domains · +435 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination parity.domains · +19 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination pphosted.com · +4 vs yesterdayNOW2,640 curated domains not answering+425 vs yesterdayERRORS10,211 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,799 throttled or blocked our scanner429 rate-limit / 403 bot-block

axalta.com

Observed 2026-07-15T00:16:32.911Z (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email bySalesforce
Registered withCSC Corporate Domains, Inc.
Also usesDocuSign
3 subdomains · manufacturing
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat axalta.com actually stands on - every host below is a signed observation
axalta.com
A / AAAA
52.226.107.31
Cloudflareserves the site
NS
ns-1412.awsdns-48.orgns-1672.awsdns-17.co.ukns-529.awsdns-02.netns-317.awsdns-39.com
awsdns-48.org + awsdns-17.co.uk + moreanswers its DNS
MX
mx1.axaltacs.iphmx.commx2.axaltacs.iphmx.com
Salesforcereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.axalta.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time272 ms
DNS resolutionNOERROR
Redirect chain
https://www.axalta.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 52.226.107.31

MX 2

  • 10mx1.axaltacs.iphmx.com
  • 20mx2.axaltacs.iphmx.com

TXT 12

  • pardot143041=c7523e9634fe63d869cb3d6d3d466a4836b38579c8d618e42eac77e800a7c6f1
  • YZuMEjAWTOazW7502Dc0yP2uKNxSha/gLQSeX+T22JY=
  • smartsheet-site-validation=g2aQ-4U1Aglr4SEWT-4DG4QVOs5MWOjU
  • 3210e75c-2896-4f5a-9b36-fd8c200
  • MS=ms55714630
  • teamviewer-sso-verification=06937d7c064641b4920f56427c9cb0fa
  • v=spf1 mx ip4:13.111.0.178 ip4:208.86.168.7 ip4:149.96.6.3 include:spf.protection.outlook.com include:axaltacs.net include:_spf.salesforce.com -all
  • docusign=71d49cde-81fb-44b2-8653-9731720c7b7a
  • apple-domain-verification=prfCdlqcO8KjbzVR
  • _globalsign-domain-verification=GDtxoenIXg_LhdVgTJdSE3PI_3_ukTwdG6l1_fmHHV

NS 4

  • ns-1412.awsdns-48.org
  • ns-1672.awsdns-17.co.uk
  • ns-529.awsdns-02.net
  • ns-317.awsdns-39.com

SOA 1

  • ns-1412.awsdns-48.org awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for axalta.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for axalta.com <a href="https://domaindrift.io/t/axalta.com"> <img src="https://domaindrift.io/badge/axalta.com.svg" width="300" height="64" alt="DomainDrift signed observations for axalta.com"> </a>

Ed25519 Receipt

Receipt ID
4071887f-adaa-4b4a-accd-5a34e3670760
Output Hash
cddab8990ad93b5b01e4d0c053a77e0cbe3fa2a8cccb35f1040aed883da456d8
Signature
ed25519:045b1f832ee4c00a28594ad5c29b6ec1f26fdc735159a48e7aa160da2904c02779cd3ab9032736d6a3154926d626043b49757f3d97327eb21ac8837f1bf7c10b
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser