CONTINUOUS INTERNET TELEMETRY24H DRIFT3,230 material changesacross 2,812 domains · -168 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,962 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,230 material changesacross 2,812 domains · -168 vs yesterdayDNS DRIFT23 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,308 curated domains not answering-6,410 vs yesterdayERRORS10,962 responded with an errorlast probe · 5xx / 404 / 429 / 403

chipotle.com

Observed 2026-07-13T00:01:01.276261201+00:00 (7h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onFastly
Email byProofpoint
Secured byDigiCert
Also usesAtlassianDockerDocuSignFacebook/MetaGoogle Search Console
1 subdomain · fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat chipotle.com actually stands on - every host below is a signed observation
chipotle.com
A / AAAA
151.101.67.10151.101.195.10151.101.3.10151.101.131.10
Fastlyserves the site
NS
ns-109.awsdns-13.comns-1368.awsdns-43.orgns-2018.awsdns-60.co.ukns-667.awsdns-19.net
awsdns-13.com + awsdns-43.org + moreanswers its DNS
MX
mxa-00200801.gslb.pphosted.commxb-00200801.gslb.pphosted.com
Proofpointreceives its email
TLS
www.chipotle.com
DigiCert Incissued its certificate

DNS Records

A 4

  • 151.101.67.10
  • 151.101.195.10
  • 151.101.3.10
  • 151.101.131.10

MX 2

  • 10mxa-00200801.gslb.pphosted.com
  • 10mxb-00200801.gslb.pphosted.com

TXT 16

  • apple-domain-verification=hczwBRAUGxvb3qM0
  • atlassian-domain-verification=oxlM0vME6xgG2q7G1XaSlOz71gOLhZDnHdffUgqDrdSBRQY5k5tjG8wodFoUnVtP
  • cisco-ci-domain-verification=6aea3cc759a3a8feb03535f00c6c51448e16c996f9c56e74c8ca536e9600127c
  • docker-verification=e5edc09b-dc5b-408c-bec5-d1aee9423d11
  • docusign=434a73cf-29b1-473b-b946-af4e35b16b00
  • docusign=ba65768a-c44b-4f29-ba89-91a780789402
  • facebook-domain-verification=li6fa7y53kaqgbnv624vurfewx3jq1
  • google-site-verification=0hWyLZ9z9wnpufE9HTh9RgjLGcQqLIVgJGxwkycvc94
  • iQcRyX9/2FqbomJqZJ089S+B2CO6hSKQfo5oM8btfiH9Ek5NuDEuivxEXaOvPiR2+ntfntJdiZ0N+FT2hJnMDA==
  • openai-domain-verification=dv-gT9bA4Cw2vjvEFGuscuJvYGe

NS 4

  • ns-109.awsdns-13.com
  • ns-1368.awsdns-43.org
  • ns-2018.awsdns-60.co.uk
  • ns-667.awsdns-19.net

SOA 1

  • ns-2018.awsdns-60.co.uk awsdns-hostmaster.amazon.com

SRV 5

  • rsceweprd01.chipotle.com:5060 p10
  • rsceweprd02.chipotle.com:5060 p10
  • rsceweprd01.chipotle.com:5061 p10
  • rsceweprd02.chipotle.com:5061 p10
  • webmail.chipotle.com:443 p1

TLS Certificates (2)

Common NameIssuerExpires
www.chipotle.com C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 Tue, 13 Oct 2026 23:59:59 +0000
DigiCert Global G2 TLS RSA SHA256 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Sat, 29 Mar 2031 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for chipotle.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for chipotle.com <a href="https://domaindrift.io/t/chipotle.com"> <img src="https://domaindrift.io/badge/chipotle.com.svg" width="300" height="64" alt="DomainDrift signed observations for chipotle.com"> </a>

Ed25519 Receipt

Receipt ID
76611275-c883-4f4d-ac1d-3d47cd218f69
Output Hash
9a09ec1e2b6f0a3eeb7021ce07836687a2bd79ca9e388294bd954fa8f6ea92e8
Signature
ed25519:33400693c165e4be8ad7edd336efef9ab94c923c1b9093d1dde072af1c38d8b7698e0e121178b78bd189936feced2c162d2c81b47b85349fc8e09067f8c7f10f
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser