firefox.com

Observed 2026-07-13T00:06:33.774415208+00:00 (8h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onGoogle

Email byAmazon SES

Secured byLet's Encrypt

Also usesFacebook/MetaGoogle Search Console

IPv6 · push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat firefox.com actually stands on - every host below is a signed observation

firefox.com

A / AAAA

35.190.14.2012600:1901:0:c197::

Googleserves the site

ns5-65.akam.netns7-66.akam.netns1-240.akam.netns4-64.akam.net

akam.netanswers its DNS

smtp1.mdc1.mozilla.com

Amazon SESreceives its email

TLS

firefox.com

Let's Encryptissued its certificate

DNS Records

A 1

35.190.14.201

AAAA 1

2600:1901:0:c197::

MX 1

10smtp1.mdc1.mozilla.com

TXT 8

3mjnbdj3h9wpslgz0gfly0pbr94wd12y
_vrrc3v9222jxd6yhvt728lc4om6z0ff
facebook-domain-verification=wcer1w80xkwrzqftwc3shhkel9ys8m
google-site-verification=ZqFMUZ8Gzf13U_nchwvBgRE_sRAxAR5xLz-X5w4BU4s
kr1887r7cjn94rzlgp1bpnj8v94wd3mg
v=spf1 mx a include:amazonses.com include:mail.zendesk.com include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email -all
google-gws-recovery-domain-verification=70476672
v=DMARC1; p=reject; adkim=r; aspf=r; rua=mailto:dmarc_agg@vali.email,mailto:accounts@firefox.com; ruf=mailto:accounts@firefox.com

NS 4

ns5-65.akam.net
ns7-66.akam.net
ns1-240.akam.net
ns4-64.akam.net

SOA 1

ns5-65.akam.net sysadmins.mozilla.org

CAA 7

issue "awstrust.com"
issue "amazontrust.com"
iodef "mailto:foxsec+caaiodef@mozilla.com"
issue "amazon.com"
issue "letsencrypt.org"
issue "amazonaws.com"
issue "digicert.com"

TLS Certificates (3)

Common Name	Issuer	Expires
`firefox.com`	C=US, O=Let's Encrypt, CN=YR2	Thu, 08 Oct 2026 19:02:59 +0000
`YR2`	C=US, O=ISRG, CN=Root YR	Sat, 02 Sep 2028 23:59:59 +0000
`Root YR`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for firefox.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/firefox.com">
  <img src="https://domaindrift.io/badge/firefox.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for firefox.com">
</a>

Ed25519 Receipt

Receipt ID: 412a3680-397e-4a7a-b4f7-85c4220352b6
Output Hash: 2506f165e54d4cf01f008fcfbdf950a2a56c39702f0a48b9ec30209df54cb4b9
Signature: ed25519:5e9b8d2a593b8d81056aaa44f5bfe497a5d2f31e4515e81eb0d4808b8149c52437e8eac98c0980fe4f9427a5a91a3b14172a28062d3421f67f99e93697084408
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/firefox.com