carmax.com

Observed Jul 24, 2026, 02:40 UTC (9h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Guarded by a firewall

Runs onAkamai Technologies

Email byProofpoint

Secured byDigiCert

Registered withCSC Corporate Domains, Inc.

Also usesDocuSignDockerFacebook/MetaGoogle Search Console

77 subdomains · automotive

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat carmax.com actually stands on - every host below is a signed observation

carmax.com

A / AAAA

173.222.169.252

Akamai Technologiesserves the site

a4-67.akam.neta9-64.akam.neta1-107.akam.neta12-64.akam.net+2 more

akam.netanswers its DNS

mxa-001ffb01.gslb.pphosted.commxb-001ffb01.gslb.pphosted.com

Proofpointreceives its email

TLS

www.carmax.com

DigiCert Incissued its certificate

DNS Records

A 1

173.222.169.252

MX 2

100mxa-001ffb01.gslb.pphosted.com
100mxb-001ffb01.gslb.pphosted.com

TXT 32

MS=ms12796044
ZA=6hvA11MoOnwxb7nkfrXuRw==
_02dh0wocswntazh7jqd5a6ycbourbea
_5wze4w0s66hgzmltwq8g7y39hmxrk6q
_698zsfqrcvmsj5yntwcrpkass3o2bzo
_9ut24ucqarr37x8fjomm1xmki00cbjw
_ezfj8pl5l71vimk2bg4d7eorky28656
_gpidjicl8wdbf4qipf11761ykp1shze
_j1d999e79p4icpmaykpadtu0thydm5v
_reqfy5vxgbh8xcqn934u14rlra6mye2

NS 6

a4-67.akam.net
a9-64.akam.net
a1-107.akam.net
a12-64.akam.net
a13-65.akam.net
a16-66.akam.net

SOA 1

a1-107.akam.net informationsecurity.carmax.com

TLS Certificates (2)

Common Name	Issuer	Expires
`www.carmax.com`	C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=GeoTrust TLS RSA CA G1	Wed, 27 Jan 2027 23:59:59 +0000
`GeoTrust TLS RSA CA G1`	C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2	Tue, 02 Nov 2027 12:23:37 +0000

Subdomains (77)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for carmax.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/carmax.com">
  <img src="https://domaindrift.io/badge/carmax.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for carmax.com">
</a>

Ed25519 Receipt

Receipt ID: rcpt_dc5907b90451554a
Output Hash: 0ffafa26651f9f007038d91160cc6a78c936e69ae7f4762c6e3cdd67f075a5e8
Signature: ed25519:2765619cac902b839f30b7239e2828cd23b387c381205373e6738c263862a9e1dac34c97dbe6320502801e45f4ad41872ec5cfc6ee86222ba1ddd58603b07f08
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/carmax.com