bhiusa.com

Observed Aug 16, 2026, 14:07 UTC (4h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Up right now
Email byProofpoint
Secured byLet's Encrypt
Also usesGlobalSignCiscoAppleDocuSignMicrosoft 365
1 subdomain · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat bhiusa.com actually stands on - every host below is a signed observation
bhiusa.com
A / AAAA
185.230.63.107
unattributedserves the site
NS
auth1.dns.cogentco.comauth2.dns.cogentco.com
cogentco.comanswers its DNS
MX
mxa-007f0d01.gslb.pphosted.commxb-007f0d01.gslb.pphosted.com
Proofpointreceives its email
TLS
bhiusa.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 185.230.63.107

MX 2

  • 10mxa-007f0d01.gslb.pphosted.com
  • 10mxb-007f0d01.gslb.pphosted.com

TXT 6

  • globalsign-domain-verification=56dfabc631fbaa257567a92c9b21ecad
  • cisco-ci-domain-verification=7fc21c26e61ae16afc38ac4a5b1314937af2e3d03c85849dda1af639740f1644
  • apple-domain-verification=QbSFAfm5iJkIpkGB
  • docusign=1ed40a8c-c2d1-42d1-82bd-581aae8a0d33
  • v=spf1 mx a ip4:20.1.128.197 ip4:20.10.24.226 ip4:20.96.12.43 ip4:20.1.130.13 ip4:156.55.94.200 include:spfhost.messageprovider.com include:spf-007f0d01.pphosted.com -all
  • MS=C1ACA14AEA9EE846C79FC2FFB1D2256E957E6278

NS 2

  • auth1.dns.cogentco.com
  • auth2.dns.cogentco.com

SOA 1

  • auth1.dns.cogentco.com dns.cogentco.com

SRV 1

  • bh-expe.bhiusa.com:5061 p10

DMARC_RECORDS 1

  • v=DMARC1; p=quarantine; rua=mailto:dmarc-8709359675@email-security.zerofox.com; ruf=mailto:dmarc-8709359675@email-security.zerofox.com;

TLS Certificates (3)

Common NameIssuerExpires
bhiusa.com C=US, O=Let's Encrypt, CN=YR2 Mon, 14 Sep 2026 00:07:29 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_10f89f222f360fbb
Output Hash
bf98cffb0ff8b8775fd0985397ce1ae8a68e561eb6133a1c75b6016ea87812ad
Signature
ed25519:151e30f39cc57f5448e53dd4ac03c88f3cdabdba5427a13b4cf0836eb75443c9bede4c68cef66253f1487fbebcdfddca71a5641ebe270bfc3152993e68252607
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser
CONTINUOUS INTERNET TELEMETRY24H DRIFT39,303 material changesacross 37,396 domains · 24h to ~2h ago · -2,256 vs yesterdayROTATION66 domains moved DNS from magpiedns.com to koaladns.com, 63 moved backa rotation loop, not a migration · 24hEMAIL DRIFT3 domains switched email provider24hNOW589 curated domains not reachable+94 vs yesterdaySITE ERRORS36,075 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 116,370 sites429 rate-limit / 403 bot-block, a posture signal