CONTINUOUS INTERNET TELEMETRY24H DRIFT1,994 material changesacross 1,784 domains · -557 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,378 curated domains not answeringlast probe, steadyERRORS10,873 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT1,994 material changesacross 1,784 domains · -557 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT1 domains switched issuing CA24h · -4 vs yesterdayNOW3,378 curated domains not answeringlast probe, steadyERRORS10,873 responded with an errorlast probe · 5xx / 404 / 429 / 403

ball.com

Observed 2026-07-13T21:00:59.904Z (7h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Registered withNetwork Solutions, LLC
Also usesGoogle Search ConsoleFacebook/MetaDocuSign
7 subdomains · fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ball.com actually stands on - every host below is a signed observation
ball.com
A / AAAA
20.114.56.124
Cloudflareserves the site
NS
nahrccidcns12.ball.combrspoidcns12.ball.comgblonidcns12.ball.com
ball.comanswers its DNS
MX
mxb-0014fe01.gslb.pphosted.commxa-0014fe01.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.ball.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time66 ms
DNS resolutionNOERROR
Redirect chain
https://www.ball.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 20.114.56.124

MX 2

  • 15mxb-0014fe01.gslb.pphosted.com
  • 15mxa-0014fe01.gslb.pphosted.com

TXT 30

  • 29rscjsgdeje7dqt9atfmkl6fp
  • hd2me50h55u2g1lsge6079dluu
  • ifl71e588b2raclchf6js13s0m
  • mentimeter-e49c937e-7492-46a3-bc4e-5d1dfaf23bba
  • 1drhc3jn05egv1cvk7d355al78
  • google-site-verification=87A5iTi0hZXWgskmNWw0u18iZb04R0saI1KlbZd441o
  • MS=ms492293161Hour
  • 32b9cf67-39c2-4bbb-a895-226fa325ffbf
  • google-site-verification=Go0d3MwSCEQMTncNlkF55tPBVtuVo1E8MT-VL2Dyrbw
  • i9qkg9pf6556hvv4hon0ahmdla

NS 3

  • nahrccidcns12.ball.com
  • brspoidcns12.ball.com
  • gblonidcns12.ball.com

SOA 1

  • nahrccidcns12.ball.com dnsmaster.ball.com

TLS Certificates (0)

None.

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ball.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ball.com <a href="https://domaindrift.io/t/ball.com"> <img src="https://domaindrift.io/badge/ball.com.svg" width="300" height="64" alt="DomainDrift signed observations for ball.com"> </a>

Ed25519 Receipt

Receipt ID
bad801d2-dd9d-42da-9575-5167a0615950
Output Hash
ad591ae6c962efe86e7c604169babd0eeb7fab823902f63cf641358dac75444a
Signature
ed25519:9e54ec4530f39b2d898b6342f4b73eafa4e348cbe9593a756f69c3c6a34e840e1af1c0317eccb09da9a682ac0c28bdcf8765f9d0ba41268322c8b3028d39f502
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser