CONTINUOUS INTERNET TELEMETRY24H DRIFT2,089 material changesacross 1,895 domains · +130 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · +3 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +5 vs yesterdayNOW3,477 curated domains not answeringlast probe, steadyERRORS8,528 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,089 material changesacross 1,895 domains · +130 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination cloudflare.com · +3 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +5 vs yesterdayNOW3,477 curated domains not answeringlast probe, steadyERRORS8,528 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block

cnh.com

Observed 2026-07-15T01:15:00.046Z (15h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Also usesMiroAtlassianDocuSign
9 subdomains · manufacturing
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat cnh.com actually stands on - every host below is a signed observation
cnh.com
A / AAAA
20.238.139.86
Cloudflareserves the site
NS
ns2.casecorp.comns1.casecorp.comns3.casecorp.comns.cnhind.com+1 more
casecorp.com + cnhind.com + moreanswers its DNS
MX
cnh-com.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.cnh.com
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time711 ms
DNS resolutionNOERROR
Redirect chain
https://www.cnh.com

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 20.238.139.86

MX 1

  • 5cnh-com.mail.protection.outlook.com

TXT 28

  • 1a66a24b6acf482fb2a30c58f9f5e64d875858aa
  • msjfrVTcfZpPexMB8+LB4gj1R2+FPK2dbunsBk5Ijah0Up3tRMJo07MXio6TmswetdMnANYX+OVdesbrGzVw9A==
  • fbv92m7hg4xvv2003rhv8vqkf0lrtym5
  • qbj3h6s2bjbmp0h7h227g2tgkdsyjzsp
  • v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
  • MS=ms57817044
  • _a4chybk94mjer4y4x2kq9dknt323flp
  • _xd99ikm89dk3ne3kgyswk6u4z9b76ow
  • knowbe4-site-verification=00491252bdab67aabd986c7863d5c9da
  • anthropic-domain-verification-n4xmxf=XSmfj2XFY5DqV0Rwxo6AV4n5E

NS 5

  • ns2.casecorp.com
  • ns1.casecorp.com
  • ns3.casecorp.com
  • ns.cnhind.com
  • ns.cnh.com

SOA 1

  • ns.cnhind.com postmaster.cnhind.com

TLS Certificates (0)

None.

Subdomains (9)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cnh.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for cnh.com <a href="https://domaindrift.io/t/cnh.com"> <img src="https://domaindrift.io/badge/cnh.com.svg" width="300" height="64" alt="DomainDrift signed observations for cnh.com"> </a>

Ed25519 Receipt

Receipt ID
8a580a1a-8f51-4ac1-971a-62fa268b0952
Output Hash
e4b759f5b731dd6988fc86642056d23340c7c0a74bf91dafbb5c89da9068b6e6
Signature
ed25519:9d63fecffed4b389658c1f11c4ad1b6329185cbc70f44bf63795328fd78f55546c3bcafffc07877f82275dc883f2f9772e38cd6ef86383379a5d98c2a49e0e04
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser