CONTINUOUS INTERNET TELEMETRY24H DRIFT3,107 material changesacross 2,792 domains · -291 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination cloudflare.com · -4 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,310 curated domains not answering-6,408 vs yesterdayERRORS10,958 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,107 material changesacross 2,792 domains · -291 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination cloudflare.com · -4 vs yesterdayEMAIL DRIFT3 domains switched email providertop destination h-email.net · -3 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,310 curated domains not answering-6,408 vs yesterdayERRORS10,958 responded with an errorlast probe · 5xx / 404 / 429 / 403

vw.com

Observed 2026-07-13T03:50:02.275Z (11h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email bySalesforce
Registered withGoDaddy.com, LLC
Also usesGoogle Search ConsoleFacebook/MetaAtlassianMiro
16 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat vw.com actually stands on - every host below is a signed observation
vw.com
A / AAAA
99.83.199.12875.2.18.28
Cloudflareserves the site
NS
ns3.vw.comns1.vw.com
vw.comanswers its DNS
MX
mx0b.vw.commx0a.vw.com
Salesforcereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.vw.com:443/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time349 ms
DNS resolutionNOERROR
Redirect chain
https://www.vw.com:443/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 99.83.199.128
  • 75.2.18.28

MX 2

  • 20mx0b.vw.com
  • 10mx0a.vw.com

TXT 23

  • google-site-verification=zccEMMvwNQecumZjMEdp4G8sOeg27ul7dtji2AL814E
  • adobe-idp-site-verification=799f7407b5ca168c7cfad993ade1d9259654b04d8a7cc5f1f427b253294be507
  • v=spf1 include:spf-0013c803.pphosted.com include:_spf.vwgroup.com include:_spf.salesforce.com ip4:148.163.135.19 ip4:148.163.141.199 ip4:199.5.47.0/24 ip4:199.5.50.176/28 ip4:194.114.62.64/27 ip4:194.114.62.208/28 ip4:148.203.151.248 ~all
  • QuoVadis=41dcd85f-5017-4646-a043-ddf748bef97e
  • ZA=h1R+iog9PanlKZxE3c6cig==
  • apple-domain-verification=z2NVu6qIi4q7BqJX
  • onetrust-domain-verification=5b191bdc52334ddc9c3199825307ecc5
  • QuoVadis=3f4537f6-cf50-4609-8217-0be699f7c765
  • jamf-site-verification=0p1A-6afOXw9hT3c6BjIIA
  • onetrust-domain-verification=2e19345df4f643afb0988a388d37a9a3

NS 2

  • ns3.vw.com
  • ns1.vw.com

SOA 1

  • ns0.vw.com domainmaster.vw.com

TLS Certificates (0)

None.

Subdomains (16)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for vw.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for vw.com <a href="https://domaindrift.io/t/vw.com"> <img src="https://domaindrift.io/badge/vw.com.svg" width="300" height="64" alt="DomainDrift signed observations for vw.com"> </a>

Ed25519 Receipt

Receipt ID
49ee4964-f694-47cb-88f6-5e8e85e8b551
Output Hash
55e5987b08e62e3920df9a2a769e718e111e41648875be4fa32815f47751005d
Signature
ed25519:3934dab5de3e0aa9cda3484c681d2f3053f322c9001a772b182b086c2217c5a704281bab5e46a8054bf2424e1dff123c7eb1c0e84639b9b65d418e5da9f46105
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser