CONTINUOUS INTERNET TELEMETRY24H DRIFT140 material changesacross 94 domains · -518 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bg · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW4,329 curated domains not answering+1,500 vs yesterdayERRORS28,095 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED84,496 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT140 material changesacross 94 domains · -518 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bg · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW4,329 curated domains not answering+1,500 vs yesterdayERRORS28,095 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED84,496 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

heb.com

Observed Jul 18, 2026, 12:21 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onIncapsula
Email byProofpoint
Secured byGlobalSign
Registered withCSC Corporate Domains, Inc.
Also usesFacebook/MetaGoogle Search ConsoleDocuSignAtlassianDocker1Password
1 subdomain · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat heb.com actually stands on - every host below is a signed observation
heb.com
A / AAAA
45.223.27.4345.223.17.43
Incapsulaserves the site
NS
ns104.a2.incapsecuredns.netns5.a1.incapsecuredns.netns217.a0.incapsecuredns.net
incapsecuredns.netanswers its DNS
MX
mxa-00182402.gslb.pphosted.commxb-00182402.gslb.pphosted.com
Proofpointreceives its email
TLS
heb.com
GlobalSign nv-saissued its certificate

DNS Records

A 2

  • 45.223.27.43
  • 45.223.17.43

MX 2

  • 10mxa-00182402.gslb.pphosted.com
  • 10mxb-00182402.gslb.pphosted.com

TXT 39

  • 00D7z00000ZxUdp=1TB7z0000000SQv
  • bluebeam-verification=w29g51n50utmdj1dmajlgusm9pkxtc
  • paloaltonetworks-site-verification=cd572e57804311cf4a37d85bc0c3b9ce5b52af73d244c80f4e339ae302390304
  • oyTtwsC2kYnNjhaLBYUJQ+uo7Oyf5LaCHR4iysDtRJAmPZl7yP101w48mXu8LHwbAWFXrmNARiB1jx0/mHfXXQ==
  • MS=ms61256282
  • LH8AwzXycnZ/6C4PHoGgpblZgyHE4jfG8DYYopCjqx3NCjeUtDqOHveLdx+fUHE0xiBjLv6Kki/JxtLzpesZGA==
  • ORDH2aCRTRv6GfDbsPetQDPRSvj8WhLKId4FygCDnKEsp6zq1iBUZ293DfHFlQWW5FBSidZRF/EyZZt8YqcJYA==
  • u6zum7jkw2PXEwFCbrnYLoSkpw806YH8PXTEe5f01VdHnyCMTsipWYun86Spys+2zAV6EkyGFb539bXC7HDgqA==
  • LuzY7BV4RU6z5PIKnH0HoDomANNyKPPvHljA5kzJ1An4ookpWhP2H0OKQRReMBLVBp60LvsOZ6z+tQsbhry9ng==
  • facebook-domain-verification=4rs0u0dfy06pmf7kigkytcqaxjsjd2

NS 3

  • ns104.a2.incapsecuredns.net
  • ns5.a1.incapsecuredns.net
  • ns217.a0.incapsecuredns.net

SOA 1

  • ns217.a0.incapsecuredns.net please_set_email.absolutely.nowhere

TLS Certificates (3)

Common NameIssuerExpires
heb.com C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R46 DV TLS CA 2026 Q2 Tue, 22 Sep 2026 15:28:24 +0000
GlobalSign Atlas R46 DV TLS CA 2026 Q2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root R46 Fri, 21 Jan 2028 00:00:00 +0000
GlobalSign Root R46 2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign Sun, 18 Mar 2029 00:00:00 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for heb.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for heb.com <a href="https://domaindrift.io/t/heb.com"> <img src="https://domaindrift.io/badge/heb.com.svg" width="300" height="64" alt="DomainDrift signed observations for heb.com"> </a>

Ed25519 Receipt

Receipt ID
6e8bfd75-e02d-4f97-8fa8-c9b7b997af6d
Output Hash
2c8af2f65ba3d64db2fb8d58827a1c04f35d9e0abd99b7bd0fb5fffe0a43415c
Signature
ed25519:b965815b66c0d30f6c4c6ff43278267fad10a7254f8eec0c4c79504be91431ca64dd4dc720360823ec3dafd605f4fb4b08afc872fac4d246575545fcbef26007
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser