carmax.com

Observed 2026-07-15T11:20:17.060Z (23h ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall

Runs onCloudflare

Email byProofpoint

Registered withCSC Corporate Domains, Inc.

Also usesGoogle Search ConsoleFacebook/MetaDocuSignDocker

7 subdomains · automotive

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat carmax.com actually stands on - every host below is a signed observation

carmax.com

A / AAAA

23.222.205.46

Cloudflareserves the site

a4-67.akam.neta13-65.akam.neta9-64.akam.neta1-107.akam.net+2 more

akam.netanswers its DNS

mxb-001ffb01.gslb.pphosted.commxa-001ffb01.gslb.pphosted.com

Proofpointreceives its email

HTTPS probe

bot_blocked Blocked our probe (WAF / bot protection) 403 blocked by cloudflare - bot protection active

HTTP status403

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time38 ms

DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

23.222.205.46

MX 2

100mxb-001ffb01.gslb.pphosted.com
100mxa-001ffb01.gslb.pphosted.com

TXT 33

_gpidjicl8wdbf4qipf11761ykp1shze
monday-com-verification=FB54gay3zdXytCqh8ysh6zd-ma8cSC3cj776c1U6b6g
894896C6168E5FBB2404A6FEDB71C32C47D7320AD061CA83759651B1AF77DF03
google-site-verification=vOjeIXNjXqzEkurMmPyhvVUL6vnmT5Qh5K8ZO9im3IM
_ezfj8pl5l71vimk2bg4d7eorky28656
_5wze4w0s66hgzmltwq8g7y39hmxrk6q
_w1p48t688t409x7ycdlmcjy8vgrfrj7
jamf-site-verification=GZBptmdXOB4KsqJgpJ4gfw
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
anthropic-domain-verification-27cv6m=MPuVvUotwJ4p2dgHaZfX0mLji

NS 6

a4-67.akam.net
a13-65.akam.net
a9-64.akam.net
a1-107.akam.net
a12-64.akam.net
a16-66.akam.net

SOA 1

a1-107.akam.net informationsecurity.carmax.com

TLS Certificates (0)

None.

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for carmax.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/carmax.com">
  <img src="https://domaindrift.io/badge/carmax.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for carmax.com">
</a>

Ed25519 Receipt

Receipt ID: 4b6145b6-0793-43b8-8ccb-ba516de616be
Output Hash: 3f6edbdc865c15d3b414037cda65ea1edeec4d36dc2fec07b8a06c370c1ce6d3
Signature: ed25519:5e2d074f32d4cda39f3e81c8e8d5e5476f21c139cc9f26a52ce5cf004c92ac035407aa6e10a94d1539c1cdfe8a1084bf7a334e143bc26770057c50486901f905
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/carmax.com