CONTINUOUS INTERNET TELEMETRY24H DRIFT549 material changesacross 481 domains · -109 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,013 curated domains not answering+184 vs yesterdayERRORS20,067 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED54,914 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT549 material changesacross 481 domains · -109 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,013 curated domains not answering+184 vs yesterdayERRORS20,067 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED54,914 throttled or blocked our scanner429 rate-limit / 403 bot-block

firstwatch.com

Observed Jul 19, 2026, 00:02 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Registered withNetwork Solutions, LLC
Also usesGoogle Search Console
5 subdomains · tranco_100k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat firstwatch.com actually stands on - every host below is a signed observation
firstwatch.com
A / AAAA
104.18.125.223
Cloudflareserves the site
NS
ns100.worldnic.comns99.worldnic.com
worldnic.comanswers its DNS
MX
firstwatch-com.mail.protection.outlook.com
Microsoft 365receives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time1080 ms
DNS resolutionNOERROR
MCP This domain advertises an AI service endpoint at _mcp._tcp.
9mmp9ik2j0ojuva1n6pu55lf29

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 104.18.125.223

MX 1

  • 10firstwatch-com.mail.protection.outlook.com

TXT 13

  • MS=ms96910328
  • 3e4449811901ea0d
  • _acme-challenge.firstwatch.com TXT DR2oERKw3-0My6N3JgaOCyXeoGnxDrzWCbyFX3h86us
  • cisco-ci-domain-verification=4243096b2ec5192bac8472d48293c4c07dffe7db7df54c32152951d20f5df4fe
  • apple-domain-verification=HXZ8kUwoZzFPUG3T
  • qyRtKj8EVvf91Bdk8qnbmK/1Fpg+4hlwBkKrjgCKOk=
  • google-site-verification=gGPzmVuJVfYunSdZCEbI273DvNbf-ZH4j9M5wT6zRg4
  • google-site-verification=TGO3KWQ5XbjiKWGn5kXDcudSQmd3oezh13uiUHxaHdw
  • v=spf1 include:spf.protection.outlook.com include:mail.zendesk.com IP4:149.72.47.232 IP4:149.72.66.117 IP4:107.23.16.222 IP4:47.207.35.254 IP4:54.173.83.138 IP4:107.20.210.250 IP4:52.207.139.168 IP4:52.1.14.157 include:spf.mandrillapp.com -all
  • 4ee4208abfd306c1ee07b3523b03c5366fae7d30706e645bb7aee48e1bbb1e1d

NS 2

  • ns100.worldnic.com
  • ns99.worldnic.com

SOA 1

  • NS99.WORLDNIC.com namehost.WORLDNIC.com

CAA 7

  • issue letsencrypt.org
  • issue pki.goog;cansignhttpexchanges=yes
  • issue sectigo.com
  • issue sni.cloudflaressl.com
  • issuewild amazon.com
  • issuewild pki.goog;cansignhttpexchanges=yes
  • issue amazon.com

TLS Certificates (0)

None.

Subdomains (5)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for firstwatch.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for firstwatch.com <a href="https://domaindrift.io/t/firstwatch.com"> <img src="https://domaindrift.io/badge/firstwatch.com.svg" width="300" height="64" alt="DomainDrift signed observations for firstwatch.com"> </a>

Ed25519 Receipt

Receipt ID
4de3c721-7657-47df-bae1-177138527889
Output Hash
840af5b806896624142aea5a741504df4a30d307a4acef1faa74c6c2da1a707e
Signature
ed25519:2588645c5bf13aa052eed48e8eeaab4ecca9a3e7db8dc65582bf2f5a171955333d3b915243ebb2f783e06745ba1bd100ed869a2dd89569024c3af715cf078d04
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser