CONTINUOUS INTERNET TELEMETRY24H DRIFT2,259 material changesacross 2,058 domains · +300 vs yesterdayDNS DRIFT19 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT8 domains switched email providertop destination outlook.com · +5 vs yesterdayNOW4,107 curated domains not answering+678 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,259 material changesacross 2,058 domains · +300 vs yesterdayDNS DRIFT19 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT8 domains switched email providertop destination outlook.com · +5 vs yesterdayNOW4,107 curated domains not answering+678 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block

vault.com

Observed 2026-07-15T02:19:37.606Z (17h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Registered withAmazon Registrar, Inc.
Also usesFacebook/MetaGoogle Search ConsoleHubSpotAtlassian
95 subdomains · legal_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat vault.com actually stands on - every host below is a signed observation
vault.com
A / AAAA
65.8.180.8565.8.180.1165.8.180.1865.8.180.113
Cloudflareserves the site
NS
ns-305.awsdns-38.comns-1510.awsdns-60.orgns-1862.awsdns-40.co.ukns-600.awsdns-11.net
awsdns-38.com + awsdns-60.org + moreanswers its DNS
MX
aspmx.l.google.comalt2.aspmx.l.google.comaspmx3.googlemail.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/3
TLS issuernot observed
Behind Cloudflareyes
Response time361 ms
DNS resolutionNOERROR
MCP This domain advertises an AI service endpoint at _mcp._tcp.
facebook-domain-verification=1ocw8lq9tmiapn7ftnu86w4l345gao atlassian-domain-verification=2wIMyMGd/E3s+/oTo9bzM2oX35B4QXvLYiL9TLT5vIss4hcGTcXyhdtv7L+mePD2 anthropic-domain-verification-tmz0er=fID95r7l0SDRKrdsQZmzWbTQ9 knowbe4-site-verification=d49fe535af62025aed3130979a6665d8

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 4

  • 65.8.180.85
  • 65.8.180.11
  • 65.8.180.18
  • 65.8.180.113

MX 5

  • 10aspmx.l.google.com
  • 30alt2.aspmx.l.google.com
  • 50aspmx3.googlemail.com
  • 20alt1.aspmx.l.google.com
  • 40aspmx2.googlemail.com

TXT 22

  • facebook-domain-verification=1ocw8lq9tmiapn7ftnu86w4l345gao
  • google-site-verification=zYd0P7MEuPqV8fRPQ2VvhtDk_3-HhOsd8G9ccGbr2hM
  • google-site-verification=0Rv1NGycb-ss8thLHzknpr31RvN-cxKS_mj9kjM-bfk
  • anthropic-domain-verification-tmz0er=fID95r7l0SDRKrdsQZmzWbTQ9
  • v=spf1 ip4:216.194.14.53/31 ip4:74.91.85.181 ip4:50.16.110.197 a:mail.vault.com include:_spf.smtp.com include:spf.mtasv.net include:5600168.spf05.hubspotemail.net include:_spf.google.com ~all
  • 98edour1fphaoo1kiclcmm24te
  • knowbe4-site-verification=d49fe535af62025aed3130979a6665d8
  • atlassian-domain-verification=2wIMyMGd/E3s+/oTo9bzM2oX35B4QXvLYiL9TLT5vIss4hcGTcXyhdtv7L+mePD2
  • google-site-verification=9wEemOHG70jUVXqg0SSus6asbyc-gynw2e1wjY_oG0w
  • google-site-verification=KEMn6igk_hyQZ7thkYjzzDxn4Qln-OyvYf3l0_TAdWI

NS 4

  • ns-305.awsdns-38.com
  • ns-1510.awsdns-60.org
  • ns-1862.awsdns-40.co.uk
  • ns-600.awsdns-11.net

SOA 1

  • ns-600.awsdns-11.net awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (95)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for vault.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for vault.com <a href="https://domaindrift.io/t/vault.com"> <img src="https://domaindrift.io/badge/vault.com.svg" width="300" height="64" alt="DomainDrift signed observations for vault.com"> </a>

Ed25519 Receipt

Receipt ID
50598958-5a1a-4b08-96f2-e5cb8ddf885d
Output Hash
e769cef07134f7184b059dc36781112f378de9ed26d45d5043d02b44766525df
Signature
ed25519:020648c5bfb7fcfc0675a29a8cc3cff3674d3b926765e90bf37a0c005ce922a580dd0e19638497b76c863d19eabafeed54362b5ec15a5316387da5fbc7ab850b
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser