CONTINUOUS INTERNET TELEMETRY24H DRIFT1,754 material changesacross 1,559 domains · +332 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination yandexcloud.net · -19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -4 vs yesterdayNOW1,034 curated domains not answering+324 vs yesterdayERRORS4,652 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,775 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,754 material changesacross 1,559 domains · +332 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination yandexcloud.net · -19 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination google.com · -4 vs yesterdayNOW1,034 curated domains not answering+324 vs yesterdayERRORS4,652 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,775 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

newspapers.com

Observed 2026-07-18T08:26:30.580Z (4m ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Registered withMarkMonitor Inc.
Also usesGoogle Search ConsoleStripeFacebook/Meta
IPv6 · 96 subdomains · tranco_10k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat newspapers.com actually stands on - every host below is a signed observation
newspapers.com
A / AAAA
104.17.113.43104.17.112.432606:4700::6811:702b2606:4700::6811:712b
Cloudflareserves the site
NS
rick.ns.cloudflare.comuma.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
mxb-002f8e01.gslb.pphosted.commxa-002f8e01.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.newspapers.com/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time237 ms
DNS resolutionNOERROR
Redirect chain
https://www.newspapers.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

  • 104.17.113.43
  • 104.17.112.43

AAAA 2

  • 2606:4700::6811:702b
  • 2606:4700::6811:712b

MX 2

  • 10mxb-002f8e01.gslb.pphosted.com
  • 10mxa-002f8e01.gslb.pphosted.com

TXT 14

  • google-site-verification=HJvNMpZoz5j-KlB2tEczqtYhlwhLlivoe9qHFLSteR8
  • MS=ms83505679
  • stripe-verification=08af68e12158f9d067ac01430afc91182431d0da2884a408641d2202a40dbd7c
  • yahoo-verification-key=pebKvVe4VYjhdfRoTU/85K3kA7dDynetcfPmoD0mJ1A=
  • dtm-domain-verification=pkIiGrNMHgIXDvVGzLH9PPPi_FfHVcyMirv9CQFr3bA.
  • Validity-Domain-Verification=ahh6a--ajdta71&akhdggS76SHKEUGkd
  • v=spf1 ip4:66.43.16.0/20 ip4:216.50.141.0/24 ip4:64.90.201.64/27 ip4:54.240.30.230 ip4:54.240.30.231 ip4:34.195.152.248 ip4:34.195.241.71 ip4:35.171.204.224 ip4:34.236.27.142 ip4:18.206.27.20 include:spf2.newspapers.com -all
  • 7fQ9W2k0RGPTVakEmzhZXAB2LgnZKTJBliIBtj21kqrbQ0rebKiGnWjokERJjvRfuMhRl6TjHehuXRmZVuskMA==
  • BZ0JhQo53WbYnYpmzzMttHuBAmSq9AoHeZupGN9lLP++tl23sZyBAJnXYBTmuARJugGTGbWqe6E3CrAxuw9NGg==
  • facebook-domain-verification=n3kkcco76kao3i3unxcgl4xzfuytvs

NS 2

  • rick.ns.cloudflare.com
  • uma.ns.cloudflare.com

SOA 1

  • rick.ns.cloudflare.com dns.cloudflare.com

CAA 19

  • issuewild ssl.com
  • issuewild letsencrypt.org
  • issue ssl.com
  • issue amazon.com
  • issuewild digicert.com; cansignhttpexchanges=yes
  • issue letsencrypt.org
  • issue digicert.com; cansignhttpexchanges=yes
  • issue globalsign.com
  • issue amazontrust.com
  • issuewild amazon.com

TLS Certificates (0)

None.

Subdomains (96)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for newspapers.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for newspapers.com <a href="https://domaindrift.io/t/newspapers.com"> <img src="https://domaindrift.io/badge/newspapers.com.svg" width="300" height="64" alt="DomainDrift signed observations for newspapers.com"> </a>

Ed25519 Receipt

Receipt ID
cad3647b-b3c1-4d9e-96eb-eea8c0e6a74e
Output Hash
0f4e54582eba54efaebe9f89b2adce4fbb9c156222d911449a70cd2cee5d823e
Signature
ed25519:8ef9f31e24ac624e1ff0db58bfbf866b03329af76c339b84c297eea12408684ec67481d7c81b245abd75ab4a92f6f8fd22eb29cf0b104412befd5200a7baca0d
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser