CONTINUOUS INTERNET TELEMETRY24H DRIFT165 material changesacross 120 domains · +19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,520 curated domains not answering+186 vs yesterdayERRORS29,897 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,355 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT165 material changesacross 120 domains · +19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,520 curated domains not answering+186 vs yesterdayERRORS29,897 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,355 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

firstrand.co.za

Observed Jul 18, 2026, 12:23 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Runs onFirst Rand Bank Limited
Also usesGoogle Search ConsoleMiro
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat firstrand.co.za actually stands on - every host below is a signed observation
firstrand.co.za
A / AAAA
196.11.130.91
First Rand Bank Limitedserves the site
NS
ns01.fnbconnect.co.zans03.fnbconnect.co.zans02.fnbconnect.co.zans04.fnbconnect.co.za
fnbconnect.co.zaanswers its DNS
MX
mx2.hc858-6.c3s2.iphmx.commx1.hc858-6.c3s2.iphmx.com
iphmx.comreceives its email

DNS Records

A 1

  • 196.11.130.91

MX 2

  • 10mx2.hc858-6.c3s2.iphmx.com
  • 10mx1.hc858-6.c3s2.iphmx.com

TXT 12

  • MS=ms92441697
  • knowbe4-site-verification=76b062960323a77f5e84c6ef76188585
  • google-site-verification=tRN7zeX3EvwvmDhqW_f7g9BeNAvQV6LThSdodM1RUFg
  • google-site-verification=EcGwCWBC9QcLMBHswxkyur-tWNm4cL7yjlXLdy0YmxU
  • miro-verification=ac13712e3683eef3cc66aa851465aef57586f3b0
  • apple-domain-verification=zYNg51KmuhnwrDND
  • google-site-verification=GLK6IVH6WSyXKP4LHgjh6FdeP4guD__vlYDMZ3vXFwY
  • flexera-domain-verification-gayviabovzcglwbn
  • v=spf1 include:_spf-1.firstrand.co.za include:_spf-2.firstrand.co.za include:_spf-3.firstrand.co.za ~all
  • ciscocidomainverification=5f203bc61fc1ad78c5f664235f9b9e11f55efbb3a2ea7e00bb885d276126a622

NS 4

  • ns01.fnbconnect.co.za
  • ns03.fnbconnect.co.za
  • ns02.fnbconnect.co.za
  • ns04.fnbconnect.co.za

SOA 1

  • ns01.fnbconnect.co.za dnsadmin.fnbconnect.co.za

SRV 4

  • vcssa.firstrand.co.za:5060 p0
  • vcssa.firstrand.co.za:5060 p0
  • expressway.firstrand.co.za:5222 p0
  • expressway.firstrand.co.za:5269 p0

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for firstrand.co.za. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for firstrand.co.za <a href="https://domaindrift.io/t/firstrand.co.za"> <img src="https://domaindrift.io/badge/firstrand.co.za.svg" width="300" height="64" alt="DomainDrift signed observations for firstrand.co.za"> </a>

Ed25519 Receipt

Receipt ID
0ad4ff3f-20e4-465a-9311-32342874033b
Output Hash
18a9f4c4bc5c57fe393f60a1d4137193c9c243ea0fa54ccd02a0dbdf939d73f5
Signature
ed25519:b110aabdb4a971e9021840394c3478319a52e4225b7c98cc2dcd6385e5517775b78e6f874ffc4f78b13c04e7ec750e8902e8315158f7ccfa484a22e27b4d6b01
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser