icij.org

Observed 2026-07-15T02:13:10.674Z (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle Workspace

Registered withGandi SAS

Also usesGoogle Search ConsoleFacebook/Meta

3 subdomains · non_profit

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat icij.org actually stands on - every host below is a signed observation

icij.org

A / AAAA

3.168.86.1123.168.86.23.168.86.1233.168.86.42

Cloudflareserves the site

ns-1463.awsdns-54.orgns-2041.awsdns-63.co.ukns-744.awsdns-29.netns-419.awsdns-52.com

awsdns-54.org + awsdns-63.co.uk + moreanswers its DNS

alt2.aspmx.l.google.comalt1.aspmx.l.google.comalt4.aspmx.l.google.comaspmx.l.google.com+1 more

Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.icij.org/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time36 ms

DNS resolutionNOERROR

Redirect chain

https://www.icij.org/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 4

3.168.86.112
3.168.86.2
3.168.86.123
3.168.86.42

MX 5

5alt2.aspmx.l.google.com
5alt1.aspmx.l.google.com
10alt4.aspmx.l.google.com
1aspmx.l.google.com
10alt3.aspmx.l.google.com

TXT 10

google-site-verification=AjUU-wl3byl1jcx2snv0WlVRpFRR-TbA0lsYreK0Sqo
MS=ms91195501
google-site-verification=hfjEyeuprakPpwJGSZxx1Y1AlORONO3LVf-fl6TQYvY
facebook-domain-verification=k1scc3fquxajb7yysjhdwyhqpqe4r4
v=spf1 include:_spf.google.com include:outboundmail.blackbaud.net include:servers.mcsv.net include:emsd1.com -all
facebook-domain-verification=5zys4kr72i7owyqnbn6uevhxjff6n2
globalsign-domain-verification=tkMAFLlHJt_ad9BQL_lG1b3fAymmr81HkVNiBfmR-m
facebook-domain-verification=lvlvxn2yrtl3g2vu08q37gcsr8nh8l
v=DMARC1; p=reject; sp=reject; rua=mailto:aobmlgh3@ag.eu.dmarcian.com, mailto:dmarc@icij.org; ruf=mailto:dmarc@icij.org
v=DKIM1; (detected)

NS 4

ns-1463.awsdns-54.org
ns-2041.awsdns-63.co.uk
ns-744.awsdns-29.net
ns-419.awsdns-52.com

SOA 1

ns-1463.awsdns-54.org awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for icij.org. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/icij.org">
  <img src="https://domaindrift.io/badge/icij.org.svg"
       width="300" height="64" alt="DomainDrift signed observations for icij.org">
</a>

Ed25519 Receipt

Receipt ID: 168e29b4-b7d7-42b6-9801-69bd4a3a64af
Output Hash: 698c5b2465cade78f63ebc2649ee5ce977f6d3a4c12f89eb3df95f91b45ab631
Signature: ed25519:a9653b1d5f5a20bc3cc0f35833a1ba6b5894eba57538b988f2bbe866d077e79fd62fcb935a6134bb4543f1d96f39dd8f5c9e407b13e7b79c3185aaf348a31d08
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/icij.org