CONTINUOUS INTERNET TELEMETRY24H DRIFT164 material changesacross 117 domains · +18 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,440 curated domains not answeringlast probe, steadyERRORS29,049 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED86,382 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT164 material changesacross 117 domains · +18 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,440 curated domains not answeringlast probe, steadyERRORS29,049 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED86,382 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

foxnews.com

Observed Jul 18, 2026, 12:02 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Email byProofpoint
Secured byDigiCert
Registered withGoDaddy Corporate Domains, LLC
Also usesGoogle Search Console
22 subdomains · media
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat foxnews.com actually stands on - every host below is a signed observation
foxnews.com
A / AAAA
23.78.9.26
unattributedserves the site
NS
ns01.dns.foxns01.foxdoua.comns02.dns.foxns02.foxdoua.com+4 more
dns.fox + foxdoua.comanswers its DNS
MX
mxa-00195501.gslb.pphosted.commxb-00195501.gslb.pphosted.com
Proofpointreceives its email
TLS
wildcard.foxnews.com
DigiCert Incissued its certificate

DNS Records

A 1

  • 23.78.9.26

MX 2

  • 10mxa-00195501.gslb.pphosted.com
  • 10mxb-00195501.gslb.pphosted.com

TXT 12

  • MS=ms40284671
  • MS=ms71309079
  • 265947818-2009536
  • bppko2051pbcn9bvdualgach7h
  • _4ywk6miyhayot1r60tb3ubei8wl9mvi
  • google-site-verification=3LvSKyvB7eXlZQtS_7fwgd0cMKh6zBBzo-g9hhEVu7k
  • _globalsign-domain-verification=BahbT-Pu-HaLP9bBimZ0MGe-4CPc4Z_MXqKNUajBmF
  • qRWnq9UOByGW6DnvW8qZ4scp8GbkRYG4bsmSOyP+dzlIB+XXQtkNbpBK3qVrJ8E7YT83Bk33z5CPO1L2KlH/mA==
  • adobe-idp-site-verification=10f6011913207e944a026129f59881b0cb1078801a8c11229c6e95615eb28070
  • postman-domain-verification=da8272c2c9fcb2ddec634c78ae9e618519672e19811f32cef729d317fa89e261

NS 8

  • ns01.dns.fox
  • ns01.foxdoua.com
  • ns02.dns.fox
  • ns02.foxdoua.com
  • ns03.dns.fox
  • ns03.foxdoua.com
  • ns04.dns.fox
  • ns04.foxdoua.com

SOA 1

  • dns1.p06.nsone.net hostmaster.nsone.net

TLS Certificates (2)

Common NameIssuerExpires
wildcard.foxnews.com C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1 Wed, 24 Feb 2027 23:59:59 +0000
DigiCert Global G3 TLS ECC SHA384 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G3 Sun, 13 Apr 2031 23:59:59 +0000

Subdomains (22)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for foxnews.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for foxnews.com <a href="https://domaindrift.io/t/foxnews.com"> <img src="https://domaindrift.io/badge/foxnews.com.svg" width="300" height="64" alt="DomainDrift signed observations for foxnews.com"> </a>

Ed25519 Receipt

Receipt ID
6d265090-58fc-4f2c-9cc5-dc4fb613a734
Output Hash
62842a8eb4cfd484756f9e02b41009956d0d42cc106750b5f7472e5562bd9de3
Signature
ed25519:8f892f8028a2a7a469e5a7539857b1730e010cbe64556860b5531e211fd8e8bc72e9b0b12116a4c616c8d9833b0cc793dc7cccf08ff1b906231618967b3cf10b
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser