CONTINUOUS INTERNET TELEMETRY24H DRIFT163 material changesacross 116 domains · +17 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,468 curated domains not answering+134 vs yesterdayERRORS29,330 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED87,025 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT163 material changesacross 116 domains · +17 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,468 curated domains not answering+134 vs yesterdayERRORS29,330 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED87,025 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

ha.com

Observed Jul 18, 2026, 13:13 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall
Runs onCloudflare
Secured byDigiCert
Registered withGoDaddy.com, LLC
Also usesAtlassianGoogle Search Console
IPv6 · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ha.com actually stands on - every host below is a signed observation
ha.com
A / AAAA
104.18.1.132104.18.0.1322606:4700::6812:1842606:4700::6812:84
Cloudflareserves the site
NS
leif.ns.cloudflare.comtess.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
proofpoint02.heritagecoin.comproofpoint03.heritagecoin.com
heritagecoin.comreceives its email
TLS
*.ha.com
DigiCert Incissued its certificate

DNS Records

A 2

  • 104.18.1.132
  • 104.18.0.132

AAAA 2

  • 2606:4700::6812:184
  • 2606:4700::6812:84

MX 2

  • 10proofpoint02.heritagecoin.com
  • 10proofpoint03.heritagecoin.com

TXT 21

  • 3ks8ps97sqwgwm5bsv228x9fn2crq0qp
  • MS=ms32474999
  • SFMC-YQdJF7ucCLM4mbPzXEt33ACt0GdkqhQI9cg25Jxe
  • anthropic-domain-verification-mf5rct=e552tCvkWZichFrshFXUoYtND
  • apple-domain-verification=ynfnrQCvHaH7q8Ge
  • atlassian-domain-verification=1rVoUUTuuoAPBwaaOxNTsWaFo4jvv/Mwf8wjhZxVStjNb20tq11ZPn6c7VdL2sIs
  • atlassian-domain-verification=p5ylJo0Wtx/eRnlj8nl6rD48ZR6hAYhLgHf0wVWWa7dzKrNUutIml7PaEJ4WBsdI
  • cisco-ci-domain-verification=6ca0f84188c886d2dcf0f461687d21fe9360639773cc8ab5925c6fc2625fe6bd
  • datadome-domain-verify=W3lvWaSTkux7ZG5Bf5nkI2CgA5ITUaJE
  • e9f7bc39-4a12-4c0f-98c4-056a723a940d

NS 2

  • leif.ns.cloudflare.com
  • tess.ns.cloudflare.com

SOA 1

  • leif.ns.cloudflare.com dns.cloudflare.com

SRV 2

  • sip.ha.com:5269 p0
  • mail.ha.com:443 p0

TLS Certificates (3)

Common NameIssuerExpires
*.ha.com C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 Fri, 25 Sep 2026 23:59:59 +0000
DigiCert Global G2 TLS RSA SHA256 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Mon, 23 Sep 2030 23:59:59 +0000
DigiCert Global Root G2 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root CA Sun, 09 Nov 2031 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ha.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ha.com <a href="https://domaindrift.io/t/ha.com"> <img src="https://domaindrift.io/badge/ha.com.svg" width="300" height="64" alt="DomainDrift signed observations for ha.com"> </a>

Ed25519 Receipt

Receipt ID
af3315a4-ecae-4603-ab84-788d37a562dc
Output Hash
1d8880c3cec802295d32d7f5a88c4680208820a7fcab498c04c37b9fb8103be6
Signature
ed25519:0fca14f5dbdb765fdd8580852061fcc6996035aa1591d87470198216ed204a66c5675abac4e2008ec9199bcf614bd31620265082ab635fa444b5be027ca4d901
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser