CONTINUOUS INTERNET TELEMETRY24H DRIFT2,127 material changesacross 1,925 domains · +168 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination parity.domains · +4 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination mimecast.com · +3 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW3,454 curated domains not answeringlast probe, steadyERRORS8,550 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,331 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,127 material changesacross 1,925 domains · +168 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination parity.domains · +4 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination mimecast.com · +3 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW3,454 curated domains not answeringlast probe, steadyERRORS8,550 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,331 throttled or blocked our scanner429 rate-limit / 403 bot-block

varo.com

Observed 2026-07-14T06:42:49.810Z (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMailchimp
Registered withKey-Systems GmbH
Also usesGoogle Search Console
IPv6 · 94 subdomains · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat varo.com actually stands on - every host below is a signed observation
varo.com
A / AAAA
216.239.34.21216.239.32.21216.239.38.21216.239.36.21+4 more
Cloudflareserves the site
NS
amanda.ns.cloudflare.comtadeo.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
d200292.b.ess.uk.barracudanetworks.comd200292.a.ess.uk.barracudanetworks.com
Mailchimpreceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time516 ms
DNS resolutionNOERROR
MCP This domain advertises an AI service endpoint at _mcp._tcp.
v=spf1 include:servers.mcsv.net include:spf.mailjet.com a mx ip4:212.123.29.16/28 ip4:23.97.235.115/32 ip4:81.246.48.80/28 ip4:85.9.209.106 ip6:2a04:3544:1000:1510:3cc8:64ff:fefa:6a7 include:spf.protection.outlook.com -all google-site-verification=pWPCLuBcD9ANks4LNCRuKxIRIlNaSJ4fnaRRbNIeodw +DCUKh1dgvlYEVuZUCIcuDDIfgbQq3+NC8WdCTQpP7ElSqjaic5s/m2W/b7I8B0xbMCCPKu+sXA+bJJ8o67A7A== google-site-verification=u7fQwZW7Swuk2yZQqfg34WTM3rffo3GXu9v2KW2JXTU

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 4

  • 216.239.34.21
  • 216.239.32.21
  • 216.239.38.21
  • 216.239.36.21

AAAA 4

  • 2001:4860:4802:38::15
  • 2001:4860:4802:36::15
  • 2001:4860:4802:34::15
  • 2001:4860:4802:32::15

MX 2

  • 20d200292.b.ess.uk.barracudanetworks.com
  • 10d200292.a.ess.uk.barracudanetworks.com

TXT 18

  • v=spf1 include:servers.mcsv.net include:spf.mailjet.com a mx ip4:212.123.29.16/28 ip4:23.97.235.115/32 ip4:81.246.48.80/28 ip4:85.9.209.106 ip6:2a04:3544:1000:1510:3cc8:64ff:fefa:6a7 include:spf.protection.outlook.com -all
  • globalsign-domain-verification=_Dvt9T2hWcG0FWRr9ttrIGemYIGhni-UaJeYqHtD2p
  • +DCUKh1dgvlYEVuZUCIcuDDIfgbQq3+NC8WdCTQpP7ElSqjaic5s/m2W/b7I8B0xbMCCPKu+sXA+bJJ8o67A7A==
  • MS=ms22304271
  • google-site-verification=pWPCLuBcD9ANks4LNCRuKxIRIlNaSJ4fnaRRbNIeodw
  • google-site-verification=ARScmkQzictReUvjWvbXcA2yISBkJ_igEy1fgMckdNI
  • varobarcodeapp.azurewebsites.net
  • google-site-verification=u7fQwZW7Swuk2yZQqfg34WTM3rffo3GXu9v2KW2JXTU
  • v=DMARC1; p=none; fo=1
  • v=DKIM1; (detected)

NS 2

  • amanda.ns.cloudflare.com
  • tadeo.ns.cloudflare.com

SOA 1

  • amanda.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (94)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for varo.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for varo.com <a href="https://domaindrift.io/t/varo.com"> <img src="https://domaindrift.io/badge/varo.com.svg" width="300" height="64" alt="DomainDrift signed observations for varo.com"> </a>

Ed25519 Receipt

Receipt ID
2acc6ec6-a6d8-4984-9b32-8164f20d3670
Output Hash
03d70847ee94121c597683598b1f32d5cb1ac13c7a4de98a2d95bcdd7cae4198
Signature
ed25519:9be995c789c80fb87ff8269c70bca769156a89fe62a0ebed61a3f847ed0bcf98a58a192afd42243646be8cc623ac3a67f2b8b8d9bb6ffa5e75cd25a4a53e300f
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser