firstcitizens.com

Observed 2026-07-13T11:24:04.150Z (2h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byProofpoint

Registered withSafeNames Ltd.

Also usesDocuSignZoomFacebook/MetaGoogle Search ConsoleMiroAtlassian

IPv6 · 9 subdomains · tranco_40k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat firstcitizens.com actually stands on - every host below is a signed observation

firstcitizens.com

A / AAAA

23.212.185.13923.212.185.1372600:1405:7400:1d::17c2:7f492600:1405:7400:1d::17c2:7f34

Cloudflareserves the site

ns02.nsfcb.comns01.nsfcb.comns02.firstcitizens.comns03.nsfcb.com+2 more

nsfcb.com + firstcitizens.comanswers its DNS

mxa-00176601.gslb.pphosted.commxb-00176601.gslb.pphosted.com

Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.firstcitizens.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time248 ms

DNS resolutionNOERROR

Redirect chain

https://www.firstcitizens.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

23.212.185.139
23.212.185.137

AAAA 2

2600:1405:7400:1d::17c2:7f49
2600:1405:7400:1d::17c2:7f34

MX 2

10mxa-00176601.gslb.pphosted.com
10mxb-00176601.gslb.pphosted.com

TXT 42

globalsign-domain-verification=22E4892E77C16D5C0E5EF2E560B25E60
mongodb-site-verification=DoDpAc97mIyloJDQwnKLECetD1ydRIOD
otwCRRi3d+YH76r0KqMXtjZkG9uB8YNRMczFhFFaFa+rer5qxePD1tBiKmXYPYJ98uV1FRyv6P8YbIGeVdJf+A==
docusign=8ef14dfb-0ad1-4814-93fa-38ffbb5351dd
ZOOM_verify_weUnK2dzIuqzJL2It3Q9WR
_u120d89ggkxf5cwnl2n9gohsictmjnm
_c0iu8d29sznj62t4lz8fyiy4c7ob3im
facebook-domain-verification=ouictd2s32l68mvnosbillq8blzooo
onetrust-domain-verification=991a31ae53f34f5aac68db51cfa7cdba
astro-domain-verification=cmomlqlwr3q5a01jbtyw2buvi

NS 6

ns02.nsfcb.com
ns01.nsfcb.com
ns02.firstcitizens.com
ns03.nsfcb.com
ns03.firstcitizens.com
ns01.firstcitizens.com

SOA 1

dns1.p08.nsone.net hostmaster.nsone.net

CAA 1

issue digicert.com

TLS Certificates (0)

None.

Subdomains (9)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for firstcitizens.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/firstcitizens.com">
  <img src="https://domaindrift.io/badge/firstcitizens.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for firstcitizens.com">
</a>

Ed25519 Receipt

Receipt ID: b3487b43-24f2-4003-b446-fefb93aebd49
Output Hash: 0f653313a2b8d4b27be27c991ba822cf297ff5b8f1122539f9b6b3613f83eb82
Signature: ed25519:f4a9eef62216982f0a1606a3621493ff73bb58cbeb00944fc926a553441d67944b036069c49383f0a8e4a3d2e76b3f8ffef126820af7526a4d0473682bd9b50b
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/firstcitizens.com