theguardian.com

Observed Jul 18, 2026, 12:02 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onFastly

Email byGoogle Workspace

Secured byGlobalSign

Registered withGoDaddy.com, LLC

Also usesGoogle Search ConsoleFacebook/MetaDocuSignDockerStripeMiro

IPv6 · 1 subdomain · media

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat theguardian.com actually stands on - every host below is a signed observation

theguardian.com

A / AAAA

151.101.193.111151.101.1.111151.101.65.111151.101.129.111+4 more

Fastlyserves the site

dns1.p04.nsone.netdns2.p04.nsone.netdns3.p04.nsone.netdns4.p04.nsone.net+4 more

nsone.net + theguardiandns.comanswers its DNS

aspmx.l.google.comalt4.aspmx.l.google.comalt3.aspmx.l.google.comalt2.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

theguardian.com

GlobalSign nv-saissued its certificate

DNS Records

A 4

151.101.193.111
151.101.1.111
151.101.65.111
151.101.129.111

AAAA 4

2a04:4e42:600::367
2a04:4e42::367
2a04:4e42:200::367
2a04:4e42:400::367

MX 5

10aspmx.l.google.com
30alt4.aspmx.l.google.com
30alt3.aspmx.l.google.com
20alt2.aspmx.l.google.com
20alt1.aspmx.l.google.com

TXT 36

google-site-verification=6-wiFtmcPHY78jVuZUE3io1c6c9SrSyjPVmUr7XRW2I
google-site-verification=9SMJbNVsYm0GCVZbGVOMSzXajrK_pqVtjW3P007kaQo
google-site-verification=I3xSjID5V7E9UDa3WSvvvpCqiqw1_34kG1Y_rz5dlV4
facebook-domain-verification=9qqmd2kl745hph02i64iyoxvdphmi9
brave-ledger-verification=7e309ab3cd9203b886205458254a13f930f79821ea05031742f7dfc9285370c8
adobe-idp-site-verification=af3ef20fdc1d370aee02414a73ce0db9f1b465c21d53a369080184cd8e4b60f1
google-site-verification=ujq5XlF5Ty7dwXv7S3AV99WRr8IwetZIjNqqloPpKmA
google-site-verification=M9Q_QcvQQCoQEca1--d55J0QKwKZt0XgAAj9DJrJ0jQ
pardot709753=1cfbb8fa5dabcb6befc9faa15661f500a64a6f22eb83bb146848633dbe7633cf
amazonses:2s68hEXFIHnDWOVNuEbZ06pSFJhN0qCtTx8lztmngls=

NS 8

dns1.p04.nsone.net
dns2.p04.nsone.net
dns3.p04.nsone.net
dns4.p04.nsone.net
ns01.theguardiandns.com
ns02.theguardiandns.com
ns03.theguardiandns.com
ns04.theguardiandns.com

SOA 1

dns1.p04.nsone.net hostmaster.nsone.net

SRV 2

expressway.theguardian.com:5060 p10
expressway.theguardian.com:5061 p10

TLS Certificates (2)

Common Name	Issuer	Expires
`theguardian.com`	C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2025 Q3	Sun, 08 Nov 2026 14:25:21 +0000
`GlobalSign Atlas R3 DV TLS CA 2025 Q3`	2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign	Fri, 16 Apr 2027 00:00:00 +0000

Subdomains (1)

subscribe.theguardian.com

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for theguardian.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/theguardian.com">
  <img src="https://domaindrift.io/badge/theguardian.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for theguardian.com">
</a>

Ed25519 Receipt

Receipt ID: 50495821-2efb-4118-9d84-b07a0ca3f9d6
Output Hash: 708a5a28cfd3c4d23c3f5a89faacc04f468ea2d01f66fbbacea4d58a548a0dd3
Signature: ed25519:7e4eb7a52b11c1e515ea0263c51308bbadb09a7e6e602a445d00886557492e4458648fd721c0daa5406e57bccb17a835d2398c43ba36cd8dc9477f53f1836a05
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/theguardian.com