CONTINUOUS INTERNET TELEMETRY24H DRIFT3,190 material changesacross 2,735 domains · -208 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -2 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination gov.cn · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,320 curated domains not answering-6,398 vs yesterdayERRORS10,954 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,190 material changesacross 2,735 domains · -208 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -2 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination gov.cn · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,320 curated domains not answering-6,398 vs yesterdayERRORS10,954 responded with an errorlast probe · 5xx / 404 / 429 / 403

thesun.co.uk

Observed 2026-07-13T00:08:23.430348863+00:00 (4h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onAutomattic
Email byProofpoint
Secured byLet's Encrypt
Also usesZoomAtlassianFigmaGoogle Search ConsoleMiro
2 subdomains · media_entertainment
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat thesun.co.uk actually stands on - every host below is a signed observation
thesun.co.uk
A / AAAA
192.0.66.2
Automatticserves the site
NS
ns-1478.awsdns-56.orgns-1970.awsdns-54.co.ukns-405.awsdns-50.comns-640.awsdns-16.net
awsdns-56.org + awsdns-54.co.uk + moreanswers its DNS
MX
mxa-00596a01.gslb.pphosted.commxb-00596a01.gslb.pphosted.com
Proofpointreceives its email
TLS
iframe.thesun.co.uk
Let's Encryptissued its certificate

DNS Records

A 1

  • 192.0.66.2

MX 2

  • 1mxa-00596a01.gslb.pphosted.com
  • 10mxb-00596a01.gslb.pphosted.com

TXT 26

  • 00d20000000cog5eao
  • 6j2pfjlk25t2mbgjtqv5gq3hmchtrkwf
  • MS=ms48418918
  • ValidationTokenValue=2a79563d-5a1e-4202-9cb0-a418f81c5166
  • ZOOM_verify_02A0JDVORdqHbeawnzucYg
  • adobe-idp-site-verification=627d3f0b-a0d9-4a42-93c9-52d7e9b35602
  • atlassian-domain-verification=uNoIhBXurxzVlQa0FvK2t9Yld5byfvXbFRQaMToGvrieKjBdylMs8jcSXRKQKqao
  • figma-domain-verification=b411f1d2852c2c7e057a2d6d70fb22896f37ccc1412d1e1bb4f9da14e2b78ad9-1769000244
  • google-site-verification=03Y2kKMdenvUPoEswcV75nBxRUfMR2F7nu4Ym2Bj9Cg
  • google-site-verification=51m6lrrVo632ZuCqs4SqZZ6N5n6T9_goU9aaf40P0tE

NS 4

  • ns-1478.awsdns-56.org
  • ns-1970.awsdns-54.co.uk
  • ns-405.awsdns-50.com
  • ns-640.awsdns-16.net

SOA 1

  • ns-640.awsdns-16.net awsdns-hostmaster.amazon.com

TLS Certificates (4)

Common NameIssuerExpires
iframe.thesun.co.uk C=US, O=Let's Encrypt, CN=YE1 Thu, 24 Sep 2026 18:37:55 +0000
YE1 C=US, O=ISRG, CN=Root YE Sat, 02 Sep 2028 23:59:59 +0000
Root YE C=US, O=Internet Security Research Group, CN=ISRG Root X2 Thu, 02 Sep 2032 23:59:59 +0000
ISRG Root X2 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for thesun.co.uk. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for thesun.co.uk <a href="https://domaindrift.io/t/thesun.co.uk"> <img src="https://domaindrift.io/badge/thesun.co.uk.svg" width="300" height="64" alt="DomainDrift signed observations for thesun.co.uk"> </a>

Ed25519 Receipt

Receipt ID
04f57cbe-5615-4ae4-8462-1c6144378739
Output Hash
dcb75236dc4c4323278036ea0f0af65c2737733f5e1e11c00c1c44661a7cac69
Signature
ed25519:310dea0a6f063f6866242b6a5c72fd554df84c10dc023e09441c4a304831648bbb3b6960fbbd30218fa265bc845e7260fede6f751bd64d8de6954924628d6b05
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser