CONTINUOUS INTERNET TELEMETRY24H DRIFT1,718 material changesacross 1,519 domains · +296 vs yesterdayDNS DRIFT5 domains changed DNS providertop destination parity.domains · -16 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination pphosted.com · -3 vs yesterdayNOW967 curated domains not answering+257 vs yesterdayERRORS4,464 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,822 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,718 material changesacross 1,519 domains · +296 vs yesterdayDNS DRIFT5 domains changed DNS providertop destination parity.domains · -16 vs yesterdayEMAIL DRIFT2 domains switched email providertop destination pphosted.com · -3 vs yesterdayNOW967 curated domains not answering+257 vs yesterdayERRORS4,464 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,822 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

firstwatch.com

Observed 2026-07-17T14:47:49.115136210+00:00 (17h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Secured byGoogle Trust Services
Also usesGoogle Search Console
1 subdomain · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat firstwatch.com actually stands on - every host below is a signed observation
firstwatch.com
A / AAAA
104.18.125.223
Cloudflareserves the site
NS
ns99.worldnic.comns100.worldnic.com
worldnic.comanswers its DNS
MX
firstwatch-com.mail.protection.outlook.com
Microsoft 365receives its email
TLS
firstwatch.com
Google Trust Servicesissued its certificate

DNS Records

A 1

  • 104.18.125.223

MX 1

  • 10firstwatch-com.mail.protection.outlook.com

TXT 14

  • v=spf1 include:spf.protection.outlook.com include:mail.zendesk.com IP4:149.72.47.232 IP4:149.72.66.117 IP4:107.23.16.222 IP4:47.207.35.254 IP4:54.173.83.138 IP4:107.20.210.250 IP4:52.207.139.168 IP4:52.1.14.157 include:spf.mandrillapp.com -all
  • 4ee4208abfd306c1ee07b3523b03c5366fae7d30706e645bb7aee48e1bbb1e1d
  • google-site-verification=gGPzmVuJVfYunSdZCEbI273DvNbf-ZH4j9M5wT6zRg4
  • cisco-ci-domain-verification=4243096b2ec5192bac8472d48293c4c07dffe7db7df54c32152951d20f5df4fe
  • 3e4449811901ea0d
  • _acme-challenge.firstwatch.com TXT DR2oERKw3-0My6N3JgaOCyXeoGnxDrzWCbyFX3h86us
  • qyRtKj8EVvf91Bdk8qnbmK/1Fpg+4hlwBkKrjgCKOk=
  • apple-domain-verification=HXZ8kUwoZzFPUG3T
  • MS=ms96910328
  • google-site-verification=TGO3KWQ5XbjiKWGn5kXDcudSQmd3oezh13uiUHxaHdw

NS 2

  • ns99.worldnic.com
  • ns100.worldnic.com

SOA 1

  • NS99.WORLDNIC.com namehost.WORLDNIC.com

CAA 7

  • issue "sni.cloudflaressl.com"
  • issuewild "amazon.com"
  • issue "letsencrypt.org"
  • issue "amazon.com"
  • issuewild "pki.goog; cansignhttpexchanges=yes"
  • issue "pki.goog; cansignhttpexchanges=yes"
  • issue "sectigo.com"

TLS Certificates (3)

Common NameIssuerExpires
firstwatch.com C=US, O=Google Trust Services, CN=WE1 Fri, 28 Aug 2026 18:59:02 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for firstwatch.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for firstwatch.com <a href="https://domaindrift.io/t/firstwatch.com"> <img src="https://domaindrift.io/badge/firstwatch.com.svg" width="300" height="64" alt="DomainDrift signed observations for firstwatch.com"> </a>

Ed25519 Receipt

Receipt ID
aeeb929c-c45d-4923-b9e4-7ed90935cdb7
Output Hash
4f56c86b226cff814ed76cc1d9c8486e4f83125740d60b93bc1ad10f77f737e0
Signature
ed25519:725d3bd3277621ca7f619c3cdbc79c83189192ec7acdd82b3ce61554b68d35bf4e611ea049e6878a4a242f0250396b28dca911885b90326556d009e763fcc50b
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser