billfixers.com

Observed Aug 16, 2026, 14:28 UTC (13h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onIncapsula

Email byProofpoint

Secured byGlobalSign

Registered withCSC Corporate Domains, Inc.

Also usesMicrosoft 365Facebook/MetaGlobalSignGoogle Search Console

11 subdomains · tranco

Every line above is a signed observation. Check the math at the bottom of the page.

DRIFT

Steady. No change on record for billfixers.com in the last day; this reading matches the one before it. The steady record is signed like every other reading. Watch it to catch the next move the moment it lands.

INFRASTRUCTURE MAPwhat billfixers.com actually stands on - every host below is a signed observation

billfixers.com

A / AAAA

45.60.101.17445.60.11.174

Incapsulaserves the site

ns-1420.awsdns-49.orgns-1835.awsdns-37.co.ukns-4.awsdns-00.comns-964.awsdns-56.net

awsdns-49.org + awsdns-37.co.uk + moreanswers its DNS

mxa-001a8401.gslb.pphosted.commxb-001a8401.gslb.pphosted.com

Proofpointreceives its email

TLS

imperva.com

GlobalSign nv-saissued its certificate

DNS Records

A 2

45.60.101.174
45.60.11.174

MX 2

10mxa-001a8401.gslb.pphosted.com
10mxb-001a8401.gslb.pphosted.com

TXT 6

MS=ms95414148
facebook-domain-verification=epladioz03kx2o44gvgmt4zgfc63qd
globalsign-domain-verification=C2F8171198BF0340DA355EFA16D5C958
globalsign-domain-verification=C649CFFFDC751711958CC54DF6429696
google-site-verification=Rj42qvM8_GorB9W0dSNPOEfE8gQE8_QI0g0K0HYNHPM
v=spf1 mx include:spf-001a8401.pphosted.com include:spf-001a8403.pphosted.com include:_spf.freshbooks.com include:spf.mandrillapp.com ~all

NS 4

ns-1420.awsdns-49.org
ns-1835.awsdns-37.co.uk
ns-4.awsdns-00.com
ns-964.awsdns-56.net

SOA 1

ns-4.awsdns-00.com awsdns-hostmaster.amazon.com

CAA 11

issue "amazon.com"
issue "amazonaws.com"
issue "amazontrust.com"
issue "awstrust.com"
issue "globalsign.com"
issue "sectigo.com"
issuewild "amazon.com"
issuewild "amazonaws.com"
issuewild "amazontrust.com"
issuewild "awstrust.com"

MCP_RECORDS 1

google-site-verification=2Pl_HDIISl2XnPU-i73yWvnqsGf-UzjJW_Qfc-f1hyU

DMARC_RECORDS 1

v=DMARC1; p=none; sp=none; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;fo=1

BIMI_RECORDS 1

google-site-verification=2Pl_HDIISl2XnPU-i73yWvnqsGf-UzjJW_Qfc-f1hyU

MTA_STS_RECORDS 1

google-site-verification=2Pl_HDIISl2XnPU-i73yWvnqsGf-UzjJW_Qfc-f1hyU

TLS Certificates (3)

Common Name	Issuer	Expires
`imperva.com`	C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R46 DV TLS CA 2026 Q3	Sun, 08 Nov 2026 20:50:08 +0000
`GlobalSign Atlas R46 DV TLS CA 2026 Q3`	C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root R46	Sat, 22 Apr 2028 00:00:00 +0000
`GlobalSign Root R46`	2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign	Sun, 18 Mar 2029 00:00:00 +0000

Subdomains (11)

WILDCARD DNSobserved 2026-08-16 14:28 UTC

DomainDrift asked this domain for one hostname that nobody ever registered, and it answered. A domain that answers invented hostnames is running wildcard DNS. It is common and usually deliberate. A SaaS platform gives every customer a subdomain this way. How the check works

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID: rcpt_ae4d395288280769
Output Hash: 2f4cb6157f191edda1c5e20f2d106f9cd41f4319e523c2437e0bac142e029dcf
Signature: ed25519:8ff96be6b1705b97ed13e68f0f69579180706a65421b9604a8b185bb66c10d8575c0f2b7e983ddef9f8382b5a55339e2b71df6e6a3a1824568bbb0c01163b707
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/billfixers.com