CONTINUOUS INTERNET TELEMETRY24H DRIFT2,226 material changesacross 2,024 domains · -325 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,393 curated domains not answeringlast probe, steadyERRORS10,884 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,226 material changesacross 2,024 domains · -325 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,393 curated domains not answeringlast probe, steadyERRORS10,884 responded with an errorlast probe · 5xx / 404 / 429 / 403

bal.com

Observed 2026-07-14T04:02:34.534Z (4h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesGoogle Search ConsoleAtlassianZoom
1 subdomain · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat bal.com actually stands on - every host below is a signed observation
bal.com
A / AAAA
162.159.135.42
Cloudflareserves the site
NS
ns74.worldnic.comns73.worldnic.com
worldnic.comanswers its DNS
MX
mxb-001c0e01.gslb.pphosted.commxa-001c0e01.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.bal.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time434 ms
DNS resolutionNOERROR
Redirect chain
https://www.bal.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 162.159.135.42

MX 2

  • 10mxb-001c0e01.gslb.pphosted.com
  • 10mxa-001c0e01.gslb.pphosted.com

TXT 11

  • google-site-verification=8PImMW7D-AUqcDl7zuczW_t63-ygCGzdkTks9FFOLLg
  • atlassian-domain-verification=wHzJzt8/rsPcrEayygXA7NtZ0FIeUQIVu3P6cB8oOp75M/9euZQifvC5KwJZVqnK
  • v=spf1 mx include:aspmx.pardot.com include:amazonses.com include:_spf.ultipro.com ip4:52.71.73.124 ip4:148.163.156.113 ip4:148.163.158.110 ip4:44.229.121.55 ip4:148.59.100.16/28 ip4:35.80.141.6 ip4:208.86.168.7 ip4:206.152.14.54 ip4:135.84.68.123 ip4:135.84.79.54 ~all
  • onetrust-domain-verification=87f18418c2fa4daaa8b6c206f4304f47
  • MS=ms62175429
  • RM7CP2KXuWVH/aj6pfqMofoiNVaYAX5w1BS5PJYJAAR6BWaDQVGrfMhCU//KN3y3A2KMsQakjIsk+wh5kxDvDw==
  • box-domain-verification=6e8bd8836713a0c1fcb19d09bef6c2bfa46a2333b1e02db96780b76ee0a61db6
  • pardot851003=8ce06136ee288939bf2210d013a20a9e50885719eadde65f9e7d74ada4633d0e
  • ZOOM_verify_8iMhsMlERIawlflFNHHWyA
  • vk90l0em8d5da6ke3uls1btasa

NS 2

  • ns74.worldnic.com
  • ns73.worldnic.com

SOA 1

  • NS73.WORLDNIC.com namehost.WORLDNIC.com

TLS Certificates (0)

None.

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for bal.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for bal.com <a href="https://domaindrift.io/t/bal.com"> <img src="https://domaindrift.io/badge/bal.com.svg" width="300" height="64" alt="DomainDrift signed observations for bal.com"> </a>

Ed25519 Receipt

Receipt ID
645a36bf-a75d-4d23-9b54-6fe0c4511752
Output Hash
044ff1a09111f0b92cc0030cd81415e6e4787ddc1420f7ffe058d7f7818c5b2c
Signature
ed25519:8b68b90dfd8c5795eeb9abcf0033336fd85b377c2b94c7805cb585ff124aa0ba1775783a9533e61f75a594728d05eda9831d271461680901c5883db2d965f10f
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser