CONTINUOUS INTERNET TELEMETRY24H DRIFT134 material changesacross 86 domains · -524 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bg · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW4,285 curated domains not answering+1,456 vs yesterdayERRORS27,763 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED82,740 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT134 material changesacross 86 domains · -524 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bg · +1 vs yesterdayCERT DRIFT1 domains switched issuing CA24h · -1 vs yesterdayNOW4,285 curated domains not answering+1,456 vs yesterdayERRORS27,763 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED82,740 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

getfirefox.com

Observed Jul 18, 2026, 13:35 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onGoogle
Secured byGoogle Trust Services
Registered withMarkMonitor Inc.
IPv6 · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat getfirefox.com actually stands on - every host below is a signed observation
getfirefox.com
A / AAAA
35.190.14.2012600:1901:0:c197::
Googleserves the site
NS
ns2.markmonitor.comns6.markmonitor.comns1.markmonitor.comns3.markmonitor.com+3 more
markmonitor.comanswers its DNS
TLS
getfirefox.com
Google Trust Servicesissued its certificate

DNS Records

A 1

  • 35.190.14.201

AAAA 1

  • 2600:1901:0:c197::

TXT 2

  • v=spf1 -all
  • v=DMARC1; p=reject; sp=reject; aspf=s; pct=100

NS 7

  • ns2.markmonitor.com
  • ns6.markmonitor.com
  • ns1.markmonitor.com
  • ns3.markmonitor.com
  • ns4.markmonitor.com
  • ns5.markmonitor.com
  • ns7.markmonitor.com

SOA 1

  • ns1.markmonitor.com hostmaster.markmonitor.com

TLS Certificates (3)

Common NameIssuerExpires
getfirefox.com C=US, O=Google Trust Services, CN=WR3 Fri, 11 Sep 2026 16:28:53 +0000
WR3 C=US, O=Google Trust Services LLC, CN=GTS Root R1 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R1 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for getfirefox.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for getfirefox.com <a href="https://domaindrift.io/t/getfirefox.com"> <img src="https://domaindrift.io/badge/getfirefox.com.svg" width="300" height="64" alt="DomainDrift signed observations for getfirefox.com"> </a>

Ed25519 Receipt

Receipt ID
ffddfd1b-fdfe-4a53-913d-1e2909abe7c9
Output Hash
eddb49d09259ec57fbbf70a30b44ff2c1222d8cd10c5252be68d1c9935c23d13
Signature
ed25519:e69a3ba43772b9ebe995f2803ddd854d60129c7cf60bb8b3f7d51b7aebaec5c1631d9d273b3bb77c7c100d76a205794822218f8018773a5de468580306d4530b
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser