CONTINUOUS INTERNET TELEMETRY24H DRIFT5,629 material changesacross 5,187 domains · last 24h · -4,786 vs yesterdayDNS DRIFT330 domains changed DNS providertop destination cloudflare.com · -329 vs yesterdayEMAIL DRIFT70 domains switched email providertop destination google.com · -97 vs yesterdayCERT DRIFT109 domains switched issuing CA24h · -110 vs yesterdayNOW467 curated domains not reachable-236 vs yesterdaySITE ERRORS17,320 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,601 sites429 rate-limit / 403 bot-block, a posture signal

telegraph.co.uk

Observed Jul 24, 2026, 02:42 UTC (9h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Not responding
Runs onAmazon
Email byGoogle Workspace
Secured byAmazon
Registered withMarkmonitor Inc.
Also usesAtlassianDockerGoogle Search Console
media_entertainment
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat telegraph.co.uk actually stands on - every host below is a signed observation
telegraph.co.uk
A / AAAA
3.167.37.213.167.37.753.167.37.783.167.37.54
Amazonserves the site
NS
ns-1323.awsdns-37.orgns-17.awsdns-02.comns-1917.awsdns-47.co.ukns-654.awsdns-17.net
awsdns-37.org + awsdns-02.com + moreanswers its DNS
MX
aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
telegraph.co.uk
Amazonissued its certificate

DNS Records

A 4

  • 3.167.37.21
  • 3.167.37.75
  • 3.167.37.78
  • 3.167.37.54

MX 5

  • 1aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 10alt4.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 32

  • 9A5E-5479-92CD-BDB9-363F-DBC3-B73E-FAD5
  • CKO=cli_ngzgfza5x3vexih67qoz3xezpa
  • CKO=cli_uugfgisni7leroxsr3oxeqk6g4
  • MS=ms27293801
  • MS=ms90821322
  • _globalsign-domain-verification=LbLpzJYGfeJslD6Gx67hlqv7w0WBkyhOG1H-vpQ_6m
  • _rimffo8umxnji9opm79mhss0zgux7qt
  • adobe-idp-site-verification=bcbd2ffcc31fe8466714532be859d0aa45942b9c11f3ee0c250a4785b03393bb
  • ahrefs-site-verification_48766bf29e3b4f7e35c7056ac32490aa6dbda277328eff2ac165829719580166
  • apple-domain-verification=e9WiroqCcOpsd3Gi

NS 4

  • ns-1323.awsdns-37.org
  • ns-17.awsdns-02.com
  • ns-1917.awsdns-47.co.uk
  • ns-654.awsdns-17.net

SOA 1

  • ns-654.awsdns-17.net awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common NameIssuerExpires
telegraph.co.uk C=US, O=Amazon, CN=Amazon RSA 2048 M01 Tue, 17 Nov 2026 23:59:59 +0000
Amazon RSA 2048 M01 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:21:28 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for telegraph.co.uk. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for telegraph.co.uk <a href="https://domaindrift.io/t/telegraph.co.uk"> <img src="https://domaindrift.io/badge/telegraph.co.uk.svg" width="300" height="64" alt="DomainDrift signed observations for telegraph.co.uk"> </a>

Ed25519 Receipt

Receipt ID
rcpt_e616d8e4b6efe853
Output Hash
883e8693a20f2069be561971c159425653e776a4f61151254ed28ceec454fba3
Signature
ed25519:b04ba75c4220ffd87276f7e5fee16a83158101ad7065d5e71c37efc129d2a6ab23093ac5e40811b55724003b6347c048ec20f13e5b3e1d87d71cce02a9184808
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser