CONTINUOUS INTERNET TELEMETRY24H DRIFT3,994 material changesacross 3,544 domains · last 24h · -6,421 vs yesterdayDNS DRIFT220 domains changed DNS providertop destination cloudflare.com · -439 vs yesterdayEMAIL DRIFT40 domains switched email providertop destination google.com · -127 vs yesterdayCERT DRIFT50 domains switched issuing CA24h · -169 vs yesterdayNOW488 curated domains not reachable-215 vs yesterdaySITE ERRORS17,229 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,516 sites429 rate-limit / 403 bot-block, a posture signal

vanguardplan.com

Observed Jul 24, 2026, 02:07 UTC (14h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Not responding
Email byProofpoint
tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat vanguardplan.com actually stands on - every host below is a signed observation
vanguardplan.com
NS
ns4.vanguard.coma4-65.akam.neta12-65.akam.netns2.vanguard.com+6 more
vanguard.com + akam.netanswers its DNS
MX
vanguardplan.com.s7b2.psmtp.comvanguardplan.com.s7a1.psmtp.comvanguardplan.com.s7b1.psmtp.comvanguardplan.com.s7a2.psmtp.com
Proofpointreceives its email

DNS Records

MX 4

  • 400vanguardplan.com.s7b2.psmtp.com
  • 100vanguardplan.com.s7a1.psmtp.com
  • 300vanguardplan.com.s7b1.psmtp.com
  • 200vanguardplan.com.s7a2.psmtp.com

TXT 2

  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • v=DMARC1; p=reject; sp=none; fo=1; pct=100; rua=mailto:email_529eda@vanguard.com; ruf=mailto:email_529edf@vanguard.com;

NS 10

  • ns4.vanguard.com
  • a4-65.akam.net
  • a12-65.akam.net
  • ns2.vanguard.com
  • a1-96.akam.net
  • a7-66.akam.net
  • a16-67.akam.net
  • a9-67.akam.net
  • ns.vanguard.com
  • ns3.vanguard.com

SOA 1

  • ns.vanguard.com hostmaster.vanguard.com

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for vanguardplan.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for vanguardplan.com <a href="https://domaindrift.io/t/vanguardplan.com"> <img src="https://domaindrift.io/badge/vanguardplan.com.svg" width="300" height="64" alt="DomainDrift signed observations for vanguardplan.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_e51cfa9de5ca3edb
Output Hash
74f04769751963c9dfd3398f31ba17e5e27b8b1ca027c9153681cd89c02b3cc1
Signature
ed25519:5c80f84f148b499789ed51c0c3d2b4b0c2c6dc05d8d73aabef9df3616d1e569e81e7c7f353d6a1de7a79a9c94667c50144a96ab21dea1cc120693f5acf10970b
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser