bill.com

Observed Jul 18, 2026, 12:06 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Secured byAmazon

Registered withGoDaddy Corporate Domains, LLC

Also usesGoogle Search Console

fintech_expanded

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat bill.com actually stands on - every host below is a signed observation

bill.com

A / AAAA

52.41.122.1752.33.202.122

Cloudflareserves the site

ns-1074.awsdns-06.orgns-1903.awsdns-45.co.ukns-490.awsdns-61.comns-892.awsdns-47.net

awsdns-06.org + awsdns-45.co.uk + moreanswers its DNS

prodstarmail.prod.a.bill.com

bill.comreceives its email

TLS

*.bill.com

Amazonissued its certificate

DNS Records

A 2

52.41.122.17
52.33.202.122

MX 1

10prodstarmail.prod.a.bill.com

TXT 43

00d4x0000017x4deau
344rt98at1epk3p3n5iibjpqlh
5upfs4mjnd9p0ms167aek74aa3
_1tllkjwy6zpg912d2jzkbrj0i5cfxpk
_5xr6c02py69eyji75205t8raax86kcx
_62qdxi3aata0ij9ubhykkai7yn1d52e
_7rk8zslqr7nimrizvctdewfvjvquces
_aadb3al7gnbhjmc8gh6jl9bhioxh3oi
_am1dnmww6intbqyhxrgwulxd2ybqy65
_awzse8zd0pbbdb5d3f7c4mw6ixugx0r

NS 4

ns-1074.awsdns-06.org
ns-1903.awsdns-45.co.uk
ns-490.awsdns-61.com
ns-892.awsdns-47.net

SOA 1

ns-1903.awsdns-45.co.uk awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common Name	Issuer	Expires
`*.bill.com`	C=US, O=Amazon, CN=Amazon RSA 2048 M04	Thu, 18 Mar 2027 23:59:59 +0000
`Amazon RSA 2048 M04`	C=US, O=Amazon, CN=Amazon Root CA 1	Fri, 23 Aug 2030 22:26:35 +0000
`Amazon Root CA 1`	C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2	Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for bill.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/bill.com">
  <img src="https://domaindrift.io/badge/bill.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for bill.com">
</a>

Ed25519 Receipt

Receipt ID: 73df8611-d70a-4088-9f3d-42da0374019e
Output Hash: 23cde6f23a8d7ee1a1747cb305d5e4be3f4638e02be4befc0ffe7a1b0a07246e
Signature: ed25519:0adfca5674fa1a0874d7bca245904669ec287c0fb29e25aad9f7c3104df3e9f6bb90041da5ad30c516a4fab8f45c63cbeafe0134e3cc627c88ff801aefaed207
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/bill.com