CONTINUOUS INTERNET TELEMETRY24H DRIFT367 material changesacross 314 domains · -1,269 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination akam.net · -15 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -7 vs yesterdayNOW51,752 curated domains not answering+37,329 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT367 material changesacross 314 domains · -1,269 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination akam.net · -15 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -7 vs yesterdayNOW51,752 curated domains not answering+37,329 vs yesterdayERRORS8,524 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED2,335 throttled or blocked our scanner429 rate-limit / 403 bot-block

ball.com

Observed 2026-07-15T04:27:11.311Z (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Registered withNetwork Solutions, LLC
Also usesFacebook/MetaGoogle Search ConsoleDocuSign
7 subdomains · fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ball.com actually stands on - every host below is a signed observation
ball.com
A / AAAA
20.114.56.124
Cloudflareserves the site
NS
gblonidcns12.ball.comnahrccidcns12.ball.combrspoidcns12.ball.com
ball.comanswers its DNS
MX
mxb-0014fe01.gslb.pphosted.commxa-0014fe01.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.ball.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time101 ms
DNS resolutionNOERROR
Redirect chain
https://www.ball.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 20.114.56.124

MX 2

  • 15mxb-0014fe01.gslb.pphosted.com
  • 15mxa-0014fe01.gslb.pphosted.com

TXT 30

  • ir86j698ut31990ctr6hguskfi
  • nq1m3be9hno7mdg3923h78ms5c
  • 1drhc3jn05egv1cvk7d355al78
  • dtm-domain-verification=Uury-F8xXAdYPRUqKYSXzpH0Fq2cmOuLyMrGekBHo3M
  • facebook-domain-verification=ym71f5jysqo2tqld9vdm9aiz49dpdd
  • i9qkg9pf6556hvv4hon0ahmdla
  • webexdomainverification.6769402ba0730669e053ab06fc0ae2a9=261545cf-ce8e-44f2-8d69-52d3111aeb58
  • A8D093A8FF82A35B9E22822A726225A98A716EB2780CE7667CBACA01F6D21037
  • webexdomainverification.4C675B8B4330B136E053AB06FC0A3F65=8fc918b2-c16b-4330-8c68-5b796e938c9f
  • google-site-verification=Go0d3MwSCEQMTncNlkF55tPBVtuVo1E8MT-VL2Dyrbw

NS 3

  • gblonidcns12.ball.com
  • nahrccidcns12.ball.com
  • brspoidcns12.ball.com

SOA 1

  • nahrccidcns12.ball.com dnsmaster.ball.com

TLS Certificates (0)

None.

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ball.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ball.com <a href="https://domaindrift.io/t/ball.com"> <img src="https://domaindrift.io/badge/ball.com.svg" width="300" height="64" alt="DomainDrift signed observations for ball.com"> </a>

Ed25519 Receipt

Receipt ID
f6521408-b448-4bf7-9915-4a75945d8c8c
Output Hash
076c43157347bb556796828a761e6bfdd98c8dc9d1907d0a9054c5cf28a4a364
Signature
ed25519:d939eca0d3e3c6874987814b176005732f2f79e3cff50ec40b6de3b87f26b2a30074b2843d7e6253cc2a02a045f5bb38d521702373179c23b56c61aed7620205
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser