CONTINUOUS INTERNET TELEMETRY24H DRIFT532 material changesacross 468 domains · -1,104 vs yesterdayDNS DRIFT5 domains changed DNS providertop destination njalla.do + njalla.in + pipe.ma · -12 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -7 vs yesterdayNOW45,408 curated domains not answering+30,985 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT532 material changesacross 468 domains · -1,104 vs yesterdayDNS DRIFT5 domains changed DNS providertop destination njalla.do + njalla.in + pipe.ma · -12 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -7 vs yesterdayNOW45,408 curated domains not answering+30,985 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block

valero.com

Observed 2026-07-15T08:26:17.674Z (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Registered withNetwork Solutions, LLC
Also usesDocuSignGoogle Search Console
8 subdomains · fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat valero.com actually stands on - every host below is a signed observation
valero.com
A / AAAA
23.185.0.1
Cloudflareserves the site
NS
ns4.level3.netns4.valero.comns3.valero.comns3.level3.net
level3.net + valero.comanswers its DNS
MX
mxb-005ffb01.gslb.pphosted.commxa-005ffb01.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.valero.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time14 ms
DNS resolutionNOERROR
Redirect chain
https://www.valero.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 23.185.0.1

MX 2

  • 10mxb-005ffb01.gslb.pphosted.com
  • 10mxa-005ffb01.gslb.pphosted.com

TXT 22

  • vg54u5bll4greci0793l41ut0d
  • autodesk-domain-verification=-DEm9qm4HKR0NhywoeP3
  • docusign=bc5d7f29-6cd4-4348-8d95-6b02abf6d526
  • intersight=4c3c6217a0d776d1d1bc95981e3f58d8696516462773eedf1f348d1e339f00bc
  • _ltcefkm62ui68bd8ry8qegvuulvwet3
  • o5c8iqum65b1rn9j26182tbl8h
  • ug10q59g0n2cjvd5ai26d6ngmc
  • google-site-verification=1lQxyxEo9VABplqalllIdp9HrIxTGb0Yf7y0NnBmLbo
  • google-site-verification=wKS_CeQu_cF0NrJYxsNY3d9yuUmyQZscojWHzFHQ9JE
  • cg5cdbgcte7b9rc1p0ej6m6ti9

NS 4

  • ns4.level3.net
  • ns4.valero.com
  • ns3.valero.com
  • ns3.level3.net

SOA 1

  • ns.valero.com hostmaster.valero.com

CAA 2

  • issue digicert.com
  • issue godaddy.com

TLS Certificates (0)

None.

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for valero.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for valero.com <a href="https://domaindrift.io/t/valero.com"> <img src="https://domaindrift.io/badge/valero.com.svg" width="300" height="64" alt="DomainDrift signed observations for valero.com"> </a>

Ed25519 Receipt

Receipt ID
8774af69-e879-47cc-bc25-ca5bf1392150
Output Hash
da5bba31ce849ec50852aca1d6d448f57eb12760e8d201ad5c1272dcef0f8c21
Signature
ed25519:9f5d5bf9abc5611e5b01ba2b3f82e34846520fdb00f3d90b1ad3fecca92ba544c70668e1f38e3ad40ed06adb25cc3fc10669f78d0c0fe6ab5ea996a65cbc9500
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser