CONTINUOUS INTERNET TELEMETRY24H DRIFT640 material changesacross 560 domains · +186 vs yesterdayDNS DRIFT12 domains changed DNS providertop destination seizedservers.com · +8 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination outlook.comNOW2,397 curated domains not answering+182 vs yesterdayERRORS9,223 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,498 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT640 material changesacross 560 domains · +186 vs yesterdayDNS DRIFT12 domains changed DNS providertop destination seizedservers.com · +8 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination outlook.comNOW2,397 curated domains not answering+182 vs yesterdayERRORS9,223 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,498 throttled or blocked our scanner429 rate-limit / 403 bot-block

subaru.it

Observed 2026-07-15T13:32:19.711Z (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMimecast
Also usesGoogle Search Console
4 subdomains · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat subaru.it actually stands on - every host below is a signed observation
subaru.it
A / AAAA
45.223.139.12245.223.145.122
Cloudflareserves the site
NS
dns2.pegasus.itdns1.pegasus.itdns3.pegasus.it
pegasus.itanswers its DNS
MX
de-smtp-inbound-2.mimecast.comde-smtp-inbound-1.mimecast.com
Mimecastreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.subaru.it/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time1469 ms
DNS resolutionNOERROR
Redirect chain
https://www.subaru.it/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 45.223.139.122
  • 45.223.145.122

MX 2

  • 10de-smtp-inbound-2.mimecast.com
  • 10de-smtp-inbound-1.mimecast.com

TXT 9

  • 0ed1fe018a3b799e6d94ce452b9f240fc7bcd8a870
  • google-site-verification=cGYGBILqhCXk2wR5iMagZSd90KL_XjE9EcTuHdw8Qq0
  • google-site-verification=-fYTWxXs7om6eacuxNKKtccoKhKQA6Weduw2qSUjWtU
  • google-site-verification=l4uVlMgy108ES4uPGYlNqV6fmbaxWP62OGg2JA2mBkQ
  • google-site-verification=4Xm0MCJrkqjmbS5gfdKcZS6u7qJ8UNHXkmEyhsN3pgA
  • knowbe4-site-verification=372005eebf0f09680ef85289326d21e9
  • _8pd9betrb5j71olvyb74d06cmxmh0tn
  • v=spf1 ip4:217.199.1.84/32 ip4:172.232.203.59 ip4:87.241.22.133/32 ip4:81.246.53.84/32 include:_spf.salesforce.com include:_spf.aruba.it include:de._netblocks.mimecast.com -all
  • v=DMARC1; p=quarantine; rua=mailto:dmarc@subaru.eu; ruf=mailto:dmarc@subaru.eu; fo=1;

NS 3

  • dns2.pegasus.it
  • dns1.pegasus.it
  • dns3.pegasus.it

SOA 1

  • dns1.pegasus.it domain.pegasus.it

TLS Certificates (0)

None.

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for subaru.it. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for subaru.it <a href="https://domaindrift.io/t/subaru.it"> <img src="https://domaindrift.io/badge/subaru.it.svg" width="300" height="64" alt="DomainDrift signed observations for subaru.it"> </a>

Ed25519 Receipt

Receipt ID
8b09fe40-7581-42f0-9f1f-3b83e0a5cec8
Output Hash
45c67ff67c380b92fc9482a74ac1b0fe70ef962a8d3835b60f060470a4702d97
Signature
ed25519:892901db6a38cec2d7ff0cdd0e505f03cf243857d45a8efb1ff7f49b05f9f2d614832f2c76fb15c9457ad5cc89ade4866187a378ecb799cd0bbfe2a18db29a05
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser