CONTINUOUS INTERNET TELEMETRY24H DRIFT7,134 material changesacross 6,728 domains · last 24h · -3,281 vs yesterdayDNS DRIFT438 domains changed DNS providertop destination cloudflare.com · -221 vs yesterdayEMAIL DRIFT105 domains switched email providertop destination google.com · -62 vs yesterdayCERT DRIFT149 domains switched issuing CA24h · -70 vs yesterdayNOW500 curated domains not reachable-203 vs yesterdaySITE ERRORS17,418 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,758 sites429 rate-limit / 403 bot-block, a posture signal

veevavault.com

Observed Jul 22, 2026, 00:44 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onAmazon
Email byGoogle Workspace
Secured byAmazon
Registered withCSC Corporate Domains, Inc.
Also usesGoogle Search Console
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat veevavault.com actually stands on - every host below is a signed observation
veevavault.com
A / AAAA
35.161.36.24852.12.151.79
Amazonserves the site
NS
ns-1114.awsdns-11.orgns-1811.awsdns-34.co.ukns-402.awsdns-50.comns-717.awsdns-25.net
awsdns-11.org + awsdns-34.co.uk + moreanswers its DNS
MX
aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comaspmx2.googlemail.com+3 more
Google Workspacereceives its email
TLS
*.veevavault.com
Amazonissued its certificate

DNS Records

A 2

  • 35.161.36.248
  • 52.12.151.79

MX 7

  • 1aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com
  • 10aspmx2.googlemail.com
  • 10aspmx3.googlemail.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 6

  • google-site-verification=HaPFfGKPGcxCiYGb-PKiHPFksx_jy-jJMTM-w3_lo2I
  • google-site-verification=SDhJebJ6c4dCDfgPUCz9f6uk9i3Dn8w-HJZV4zf8n-E
  • https://veeva.com/vault
  • v=spf1 include:%{i}._spf.veevaops.com include:_spf.google.com ~all
  • xdkhkyxfxb5596vlggl8k8z7xtxld073
  • v=DMARC1; p=quarantine; rua=mailto:7eab05b1@inbox.ondmarc.com

NS 4

  • ns-1114.awsdns-11.org
  • ns-1811.awsdns-34.co.uk
  • ns-402.awsdns-50.com
  • ns-717.awsdns-25.net

SOA 1

  • ns-1114.awsdns-11.org awsdns-hostmaster.amazon.com

CAA 15

  • iodef "mailto:security-ops@veeva.com"
  • issue "amazon.com"
  • issue "amazonaws.com"
  • issue "amazontrust.com"
  • issue "awstrust.com"
  • issue "digicert.com"
  • issue "letsencrypt.org"
  • issue "thawte.com"
  • issuewild "amazon.com"
  • issuewild "amazonaws.com"

TLS Certificates (3)

Common NameIssuerExpires
*.veevavault.com C=US, O=Amazon, CN=Amazon RSA 2048 M01 Mon, 01 Mar 2027 23:59:59 +0000
Amazon RSA 2048 M01 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:21:28 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for veevavault.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for veevavault.com <a href="https://domaindrift.io/t/veevavault.com"> <img src="https://domaindrift.io/badge/veevavault.com.svg" width="300" height="64" alt="DomainDrift signed observations for veevavault.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_d5ccef1740ff7da2
Output Hash
c4936481a7b6bddf8c0678736b4e197a82b69e509ccd85616ef989ea00df94f2
Signature
ed25519:99198b0b60949d11bbc662f3b320d3ad20793b3f82431abfe3b8050b9fc3584eb8d7e23fc9a96442dc6e38909279d1c2b749a3a71b74b787138118951451f204
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser