icij.org

Observed Jul 21, 2026, 19:26 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onAmazon

Email byGoogle Workspace

Secured byAmazon

Registered withGandi SAS

Also usesFacebook/MetaGoogle Search Console

non_profit

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat icij.org actually stands on - every host below is a signed observation

icij.org

A / AAAA

3.167.69.1193.167.69.1113.167.69.403.167.69.107

Amazonserves the site

ns-1463.awsdns-54.orgns-2041.awsdns-63.co.ukns-419.awsdns-52.comns-744.awsdns-29.net

awsdns-54.org + awsdns-63.co.uk + moreanswers its DNS

aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

*.icij.org

Amazonissued its certificate

DNS Records

A 4

3.167.69.119
3.167.69.111
3.167.69.40
3.167.69.107

MX 5

1aspmx.l.google.com
10alt3.aspmx.l.google.com
10alt4.aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com

TXT 9

MS=ms91195501
facebook-domain-verification=5zys4kr72i7owyqnbn6uevhxjff6n2
facebook-domain-verification=k1scc3fquxajb7yysjhdwyhqpqe4r4
facebook-domain-verification=lvlvxn2yrtl3g2vu08q37gcsr8nh8l
globalsign-domain-verification=tkMAFLlHJt_ad9BQL_lG1b3fAymmr81HkVNiBfmR-m
google-site-verification=AjUU-wl3byl1jcx2snv0WlVRpFRR-TbA0lsYreK0Sqo
google-site-verification=hfjEyeuprakPpwJGSZxx1Y1AlORONO3LVf-fl6TQYvY
v=spf1 include:_spf.google.com include:outboundmail.blackbaud.net include:servers.mcsv.net include:emsd1.com -all
v=DMARC1; p=reject; sp=reject; rua=mailto:aobmlgh3@ag.eu.dmarcian.com, mailto:dmarc@icij.org; ruf=mailto:dmarc@icij.org

NS 4

ns-1463.awsdns-54.org
ns-2041.awsdns-63.co.uk
ns-419.awsdns-52.com
ns-744.awsdns-29.net

SOA 1

ns-1463.awsdns-54.org awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common Name	Issuer	Expires
`*.icij.org`	C=US, O=Amazon, CN=Amazon RSA 2048 M04	Thu, 11 Mar 2027 23:59:59 +0000
`Amazon RSA 2048 M04`	C=US, O=Amazon, CN=Amazon Root CA 1	Fri, 23 Aug 2030 22:26:35 +0000
`Amazon Root CA 1`	C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2	Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for icij.org. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/icij.org">
  <img src="https://domaindrift.io/badge/icij.org.svg"
       width="300" height="64" alt="DomainDrift signed observations for icij.org">
</a>

Ed25519 Receipt

Receipt ID: rcpt_afcd9c32a31cb8a8
Output Hash: e8268300d37fce409f2cb7781d9c51888999d749a03df3dc750b2585f8777e7c
Signature: ed25519:af3b09e16dd4c0a08ea1253ad4f015dd7bba399cbc8fde9e35c16cf023e737b729ffa2c615db758b8f8941fcfb142829dab2e88e4f8de6ca21add073e156de05
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/icij.org